Static task
static1
Behavioral task
behavioral1
Sample
00f045507bae5baa25370fe276373916_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
00f045507bae5baa25370fe276373916_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
00f045507bae5baa25370fe276373916_JaffaCakes118
-
Size
717KB
-
MD5
00f045507bae5baa25370fe276373916
-
SHA1
7a5a548678ff6ac8caa4ec2bcbb1171047235723
-
SHA256
ace9b7cf6d1ce131b35ec00618be8b5fb40524fa67b3d860f05b1ba51b5ddee9
-
SHA512
aff5f732e82aa868bec693e36a69263eddda2d5f8ec358d7e37171e0731bce0cfe728c0af1b265bd196a4f423541198b4a356a0aa54ae5c0918f043d8b81f336
-
SSDEEP
12288:b1b9sSN/AO81I/RfXUAFXGApcX1tMa+fm7FvhVXU1O8ornq+ru1f0lTzg0KFGg1d:b1b9oLQHGApq70ErVXUZorHru1KHgDJf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00f045507bae5baa25370fe276373916_JaffaCakes118
Files
-
00f045507bae5baa25370fe276373916_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ