Static task
static1
Behavioral task
behavioral1
Sample
167c7a706a87445535773087e865351b_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
167c7a706a87445535773087e865351b_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
167c7a706a87445535773087e865351b_JaffaCakes118
-
Size
28KB
-
MD5
167c7a706a87445535773087e865351b
-
SHA1
ed8507623b6045e0eb9dd2fceb0645bd39e65b64
-
SHA256
2b7e3781cc673531eb6527411333058b4bf5c4f33ac70153a3f086a123c37fed
-
SHA512
80a7124e78464ae8d44f09a10344e0d04445891f924afc37c28e2a3f0569ed7c2bd932085b09284dd12eadd14dab72f7305c820b5452249dc3f9872c776d11e6
-
SSDEEP
768:HZ/XCMnqMv+1a1oaJU8ndM3jrW7mElpEUK4vJE2F:tLv+1BaJijUlpE0BF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 167c7a706a87445535773087e865351b_JaffaCakes118
Files
-
167c7a706a87445535773087e865351b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.avc Size: 512B - Virtual size: 349B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE