Static task
static1
Behavioral task
behavioral1
Sample
1583ed7b2f7e81f49d48c44ed6d50226_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1583ed7b2f7e81f49d48c44ed6d50226_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1583ed7b2f7e81f49d48c44ed6d50226_JaffaCakes118
-
Size
201KB
-
MD5
1583ed7b2f7e81f49d48c44ed6d50226
-
SHA1
d7c1cbd9dd45f4674b0b206b99513837b1ee1b4f
-
SHA256
44ad77ea1ca765844a1f9f6947683e7fd5858d7651440a740a8704f300143cec
-
SHA512
0a6aac3105d37e26208159377b0ac5aaf85cdc27144182e38ad76f7c41405e055aa2625d65fa5d55f3934f2ca383c8faf003bd187fc8e28977617d915a48122b
-
SSDEEP
3072:q0ZI+8gGrRAuhWPi6j928ExVJgsa0H8K:t6iK60jXagv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1583ed7b2f7e81f49d48c44ed6d50226_JaffaCakes118
Files
-
1583ed7b2f7e81f49d48c44ed6d50226_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE