Static task
static1
Behavioral task
behavioral1
Sample
258b0a7d9fe5cec81e9e61b234963b80_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
258b0a7d9fe5cec81e9e61b234963b80_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
258b0a7d9fe5cec81e9e61b234963b80_JaffaCakes118
-
Size
428KB
-
MD5
258b0a7d9fe5cec81e9e61b234963b80
-
SHA1
fb32c80fd09e423d803600815e42e34659d0099a
-
SHA256
3f91730ed98e51f41d100ce6492b9c0afcb72b2d86265b54eba6b6ebe909488b
-
SHA512
ffe1ddb89b1aa009d4d6bd1755a543fe8d38fa682f84a0d481f749fe8a6c77c0f64d4233458713d16eab09d4826d0823388f9d4f0f803112d6ab41e7aeeb43d0
-
SSDEEP
6144:UZfec9EbXDk6Rk8KAE2EJuHOLE2EgrG1VVE+IA:UZWtI6RkZwOGsut
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 258b0a7d9fe5cec81e9e61b234963b80_JaffaCakes118
Files
-
258b0a7d9fe5cec81e9e61b234963b80_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ