Static task
static1
Behavioral task
behavioral1
Sample
07e06545ebd839d658a9c439695163a5_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
07e06545ebd839d658a9c439695163a5_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
07e06545ebd839d658a9c439695163a5_JaffaCakes118
-
Size
196KB
-
MD5
07e06545ebd839d658a9c439695163a5
-
SHA1
059d64cba59fa018be5e62d1186f1f22dd4fb2ac
-
SHA256
e254cc98fa40ef1e55f9b93e78d924b0e5fbd50699e8c7f456f4627874d1b84d
-
SHA512
6f80211499d4fe70411fd3516575a2e00b38329b7ad0d2fd54d335eaf95f4bfd4acc0898c8becc0b7226af4efc8e22ecd59abc44a4909b227d98a602f545f4ab
-
SSDEEP
768:j55sUaKOuc1LVIeM7kfgFHwPI9//6JqYfq+FvUn/HtEP9CGHAZEERj7bO0WUYShJ:gZ/fgkAqJlV+n1EgGHo7P1YPx28VT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07e06545ebd839d658a9c439695163a5_JaffaCakes118
Files
-
07e06545ebd839d658a9c439695163a5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 152KB - Virtual size: 149KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ