Static task
static1
Behavioral task
behavioral1
Sample
1598515889e8628a9f8a022029417285_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1598515889e8628a9f8a022029417285_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1598515889e8628a9f8a022029417285_JaffaCakes118
-
Size
411KB
-
MD5
1598515889e8628a9f8a022029417285
-
SHA1
90a2da5a2ef94c85d112c0d3db09e8b6aabb028f
-
SHA256
751f8164190a932cbbbdffba7eb94ea2bac4d8d473c90ea4dc884312247b7561
-
SHA512
295b6aac602f42106ea47e7c694706eeb41725bb367f90cb9a708ba6a557962b7331ba8007d7981c94af1f3e1080616ce6f98974c027fb5a2d1a501af330a042
-
SSDEEP
6144:vu3rWYHVqUq7OzHHHjjHXfASFRoaPrL3E5TS6QTuoapYP1IM/3d4NN8+ygWR7mIW:23rWYHcUqyzn/kOzuo/438tk9Y8r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1598515889e8628a9f8a022029417285_JaffaCakes118
Files
-
1598515889e8628a9f8a022029417285_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 344KB - Virtual size: 343KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ