Static task
static1
Behavioral task
behavioral1
Sample
84304f8c7135b90e1b55a5d82b13772b_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
84304f8c7135b90e1b55a5d82b13772b_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
84304f8c7135b90e1b55a5d82b13772b_JaffaCakes118
-
Size
1.4MB
-
MD5
84304f8c7135b90e1b55a5d82b13772b
-
SHA1
6c84b41e7898e2638ff72683d65c189a351dcb9f
-
SHA256
96a90a7fb8ea39bcdfdb44b5f7745e581f96f2df5b2cb5cb8e9742a7317fd99a
-
SHA512
9000690bb1b50e730ab19549c808393840a11d99fb11749e288b1270882cc049623d0439173870cdb8ea2d4197923c3417be5f6a62d5fdc37d9fd525ce6196f9
-
SSDEEP
24576:KEtl9mRda1IqMMpXS0hN0V0HLEtl9mRda1IqMMpXS0hN0V0HBDyo1tj4:BEs1awi0L0qgEs1awi0L0qZtc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84304f8c7135b90e1b55a5d82b13772b_JaffaCakes118
Files
-
84304f8c7135b90e1b55a5d82b13772b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 368KB - Virtual size: 368KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE