Static task
static1
Behavioral task
behavioral1
Sample
059745b0c802bfbc57878a2074520f21_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
059745b0c802bfbc57878a2074520f21_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
059745b0c802bfbc57878a2074520f21_JaffaCakes118
-
Size
6KB
-
MD5
059745b0c802bfbc57878a2074520f21
-
SHA1
49b2149c95c6f564cab105fa6e72dfbb881e36d9
-
SHA256
54484098bc444e7ed396e472c02a98cbd619563f0a5dae9f2b927c10652d441c
-
SHA512
20b5109b9da3e737211d418951cf335e5351b49c211cf3cb4c5458a55540fdc8f93ac761bae7cb91cc4c9a440fbe3e2e4084256b0c1b1c3f264418d5c233dace
-
SSDEEP
48:OEPo+YiOEBuJtti/1DqKPAiL+LnEphBKW3ZiuG/B6Mb8jv8jrbj2ZoVoX93MGF0B:nPo+LTBZ/1DqKPZUwhIB6BgvMip
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 059745b0c802bfbc57878a2074520f21_JaffaCakes118
Files
-
059745b0c802bfbc57878a2074520f21_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 33B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.MaskPE Size: 512B - Virtual size: 305B
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ