Static task
static1
Behavioral task
behavioral1
Sample
095e4139f6b1f31f1ab9ce2592168c77_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
095e4139f6b1f31f1ab9ce2592168c77_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
095e4139f6b1f31f1ab9ce2592168c77_JaffaCakes118
-
Size
256KB
-
MD5
095e4139f6b1f31f1ab9ce2592168c77
-
SHA1
359640906089070c58e5b6b9898c609e1b1b8af8
-
SHA256
e87025ff3b9041628e9ade0cc0c53f6fc082395890bd5847fb761d1ff2cff98b
-
SHA512
36284cd4bd51375f9d9a8b9b6acb6dd8086246e4e828a2a835a02815186515bc3c01967a2f8c0123177ac0a826a553426bfda553fb30ec630ecb7bfb19012fe4
-
SSDEEP
6144:OG9mM6fzcK3No4ef8Ft4nDWgRAkPDCGQn8xID0DMFkFrzwGs1o:nxcHNM8+R3PDCGLxe0D9F3nMo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 095e4139f6b1f31f1ab9ce2592168c77_JaffaCakes118
Files
-
095e4139f6b1f31f1ab9ce2592168c77_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.textbss Size: - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 244KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 312B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ