Static task
static1
Behavioral task
behavioral1
Sample
089600e79b99980102bb2e047ecbe4cb_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
089600e79b99980102bb2e047ecbe4cb_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
089600e79b99980102bb2e047ecbe4cb_JaffaCakes118
-
Size
492KB
-
MD5
089600e79b99980102bb2e047ecbe4cb
-
SHA1
6e6e64e1f4932f9c5ef32a515b54049f8c270995
-
SHA256
b872e099b242e4908be8bdb34fb1d1438cd84e6276c478344138e969b6ca2a04
-
SHA512
a19aa7c481a163253a82f88f40fea3602b522b49ac779d18b7e087f51268727f0703677926c36c9d14679e753b1a48f318c7c95ceeefad6889a78c075e47359e
-
SSDEEP
6144:8Aa8YSe8OXsiUbGtcG8gKsoF2idZecnl20lHRxp3gsncduD7yB9VCO6Sco4q8+dW:vaKnutnn4F3Z4mxxfDqVTVOCNg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 089600e79b99980102bb2e047ecbe4cb_JaffaCakes118
Files
-
089600e79b99980102bb2e047ecbe4cb_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 168KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE