Static task
static1
Behavioral task
behavioral1
Sample
0d2d6acf663b0d5cbe9f4cb6cb6b0d50_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0d2d6acf663b0d5cbe9f4cb6cb6b0d50_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0d2d6acf663b0d5cbe9f4cb6cb6b0d50_JaffaCakes118
-
Size
158KB
-
MD5
0d2d6acf663b0d5cbe9f4cb6cb6b0d50
-
SHA1
dc32c0b2f2c9223afcd86c190fec71034d1fa97a
-
SHA256
09d51478a92684e3e728e3812f2cb806cdeb4d7a1068cfe3e3d99314b058e70c
-
SHA512
971264a51ab209266e43b756a9b02dd6266233000ae77a8fe84605634853d7d6abd6ffd0401068ca211f4ec903bf27bbdc7c910f3d00afd8db3ce9c611b7c46a
-
SSDEEP
3072:DaQVXhGOYaQ8sb0WNDC4NxNMHWrs9DBuYktM99pw6SaZWV5c5FaMr:DaFOYaNRWU4NxMWA9VuY2g9CyZWO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d2d6acf663b0d5cbe9f4cb6cb6b0d50_JaffaCakes118
Files
-
0d2d6acf663b0d5cbe9f4cb6cb6b0d50_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 131KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE