Static task
static1
Behavioral task
behavioral1
Sample
7ee15d6adaf15e4df2171e00260d5f46_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
7ee15d6adaf15e4df2171e00260d5f46_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
7ee15d6adaf15e4df2171e00260d5f46_JaffaCakes118
-
Size
325KB
-
MD5
7ee15d6adaf15e4df2171e00260d5f46
-
SHA1
344ffd936f14a90da5391e8f8ee69bb3625e6e96
-
SHA256
b30149259ce83735898ab45dc7670bfb93fdcfd5cd6d3f166cabbb80aa040ccb
-
SHA512
1acf7640ad4f97ea002b4dbc1fd6ebae578f69125994a61c6697cebe9490f66a3f04f24afdffab0245b3dd42945bceba1e2145a6ccff92b848b07bc988673709
-
SSDEEP
6144:oWCPbgwB/YQcOWX/ZGw5jL3CDUm0+CUdwtoPoT0lvf9ePTNJM+0tqIKRQK:HebgwB/YQZCAUdQGoPoTsvf8jatRKRF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ee15d6adaf15e4df2171e00260d5f46_JaffaCakes118
Files
-
7ee15d6adaf15e4df2171e00260d5f46_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ