Static task
static1
Behavioral task
behavioral1
Sample
1669de08fffd21ff7d28f23cbdf90cb8_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1669de08fffd21ff7d28f23cbdf90cb8_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1669de08fffd21ff7d28f23cbdf90cb8_JaffaCakes118
-
Size
50KB
-
MD5
1669de08fffd21ff7d28f23cbdf90cb8
-
SHA1
1ab6f1f8846fe90c4917ee89643e2117f490f9dc
-
SHA256
589ec6fb82aed6bfed51f28774cc821507bd4c0d8cc05912877bc9b159f3b8f4
-
SHA512
19c02f11954bdb62f71d89bdb04f0b4a5133720a7acc14a0a4b2d6007dccadd07e6f7f807676f6b9ab1d1fc7b388effc0f9bf37bdcd3216d86c0c6612c1b3085
-
SSDEEP
768:vNlQeBqYqPQ5gioCH7J6CkAmQ/6LGhRV5lGk+hFK6e9+OG4TK:1+VCH0nU/P/V+k+hWz3O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1669de08fffd21ff7d28f23cbdf90cb8_JaffaCakes118
Files
-
1669de08fffd21ff7d28f23cbdf90cb8_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 20B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ