Static task
static1
Behavioral task
behavioral1
Sample
0988d546fa7626b1f3b85a1902cfdc87_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0988d546fa7626b1f3b85a1902cfdc87_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0988d546fa7626b1f3b85a1902cfdc87_JaffaCakes118
-
Size
908KB
-
MD5
0988d546fa7626b1f3b85a1902cfdc87
-
SHA1
c1dbd3e6bb3e25009686d7039b5331b7310511e6
-
SHA256
2ce99d5a412db85678fcdecc1a72e9167b16a765fcaa377c129c49bf2d5d9b30
-
SHA512
fa41671a7cd57507a6086ee33c2c615002926a73c84a5507465683ebd5ccfaf4d3fd6068de8fe74bdf1d2166dde4ecf7bd13d974c0deaff24f9724e35283a0fe
-
SSDEEP
12288:oK7nT0X/9K3ZrtTnMDIKfLM07Jm7vgQLWtRqfjnc9iJweNTieH8QQx2RXmU1UQrC:oKOg3ZhYD1fYoFQrrc9nl4UuJQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0988d546fa7626b1f3b85a1902cfdc87_JaffaCakes118
Files
-
0988d546fa7626b1f3b85a1902cfdc87_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ