Static task
static1
Behavioral task
behavioral1
Sample
08577489f31b5643b6febccc0f0048af_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
08577489f31b5643b6febccc0f0048af_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
08577489f31b5643b6febccc0f0048af_JaffaCakes118
-
Size
183KB
-
MD5
08577489f31b5643b6febccc0f0048af
-
SHA1
9515a9ce89a32ef6304fcefc7aee34ce7a6d9c7e
-
SHA256
25d91f1f6f53892a1aaa00b9a3ad55413e622ff51d8bf8b79f353fac7c5bd618
-
SHA512
2744262a4f0e570ec43dbed3e9c9fa11712645303be5a605f48a5086638a78d537bd699a12bc0613045810cf1300acc37e567eedc9cf1d15bd8af9538993820e
-
SSDEEP
3072:lj1CEyZdnXO60TxRjuHrQWJKMcDMno2GrhTBf/8QjbvyoWxC3:9wJ+Hxk3cDMoj9TB38ebr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08577489f31b5643b6febccc0f0048af_JaffaCakes118
Files
-
08577489f31b5643b6febccc0f0048af_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.MaskPE Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ