Static task
static1
Behavioral task
behavioral1
Sample
b575eed3cdc0fdabd56651ad34b445cb_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b575eed3cdc0fdabd56651ad34b445cb_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
b575eed3cdc0fdabd56651ad34b445cb_JaffaCakes118
-
Size
3.8MB
-
MD5
b575eed3cdc0fdabd56651ad34b445cb
-
SHA1
3193af8914b89ee61ce53924654a95bc98a9fdce
-
SHA256
19528e910d65531c865b4851c50a59a9c13ad46489ba3dd832767721b6a2cb2c
-
SHA512
b8050cfcedeea54cf93b225fe5119923488c536579f6b3a342f7ab11f33219d1e8c2a616920e58fd3d5b769adea70f29d85288661fa9efdf3055b082b24c778a
-
SSDEEP
49152:DAJt1t1taMPpW0ZGXr1862sjvGSRsj0Zuur1T75Yi9WN2GVHSrszKErmNF98E:DAxtaMhW0c17vGdJg1bWN2oHSRErmNr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b575eed3cdc0fdabd56651ad34b445cb_JaffaCakes118
Files
-
b575eed3cdc0fdabd56651ad34b445cb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 863KB - Virtual size: 862KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 75KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 240B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ