Static task
static1
Behavioral task
behavioral1
Sample
097e63402bea084b2cabd589a91a2694_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
097e63402bea084b2cabd589a91a2694_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
097e63402bea084b2cabd589a91a2694_JaffaCakes118
-
Size
373KB
-
MD5
097e63402bea084b2cabd589a91a2694
-
SHA1
e5e3c37f9ec5ced36c02d8f3b4dd878c5a95dd27
-
SHA256
53a7a2dc2c68e8d951408cc7e9c5861a218ebdfa4c8c764944aba18a579103b5
-
SHA512
5023b684371378b05cfde51eefc721676f8a029b52d0fa41100a85a57b9cd7d76162db6404d1533d63f64aa2c054292e98f878ed74899b0a10f826bd5d431836
-
SSDEEP
6144:0d4gFGIBFF2x2lOa/jCktNNYQ1nHjKZ7EleehDnE8L42nVW5GJZ2tNYLj8MfsYIv:0dRZBFUszxtNNYQ1HjKAeCDnEuVzYKjm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 097e63402bea084b2cabd589a91a2694_JaffaCakes118
Files
-
097e63402bea084b2cabd589a91a2694_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 224KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 136KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE