Static task
static1
Behavioral task
behavioral1
Sample
279efaf87df4b17a1872f8cba95ad0b9_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
279efaf87df4b17a1872f8cba95ad0b9_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
279efaf87df4b17a1872f8cba95ad0b9_JaffaCakes118
-
Size
133KB
-
MD5
279efaf87df4b17a1872f8cba95ad0b9
-
SHA1
a4f049a737d0f76f8d267dd59895ec4cf3e4a8ec
-
SHA256
9aa1aabd6f2372226e493b12a7dd4bb558f8869ff669bdb126bc53ce9c07e522
-
SHA512
d246fd5c127db196ff35ed0376d637ee938f24c49c157af4343c1804c707185af3a225751c7d82b59c62561ee50eca2be51b8c4a7eedce8b9e5e5482f32f4736
-
SSDEEP
3072:1xTqpdA3f6QNf2IPO4DpmWpAsfYbTOBoefYi6a9k20tAvscwg8RdK73P:v2pdqfv2IPOGfXf5ovWv7ORs7f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 279efaf87df4b17a1872f8cba95ad0b9_JaffaCakes118
Files
-
279efaf87df4b17a1872f8cba95ad0b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 12B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ