Static task
static1
Behavioral task
behavioral1
Sample
174690275adcfc09a2e9c3cd2eae2154_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
174690275adcfc09a2e9c3cd2eae2154_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
174690275adcfc09a2e9c3cd2eae2154_JaffaCakes118
-
Size
30KB
-
MD5
174690275adcfc09a2e9c3cd2eae2154
-
SHA1
46164f5529c6e558eebd1fb57b65d43f6d37b254
-
SHA256
cb83f003b466202cd74af0d9c87e6b389bdb78cb6506caccf5cdf937f8388878
-
SHA512
994e5a4c81fdf64495d71b12e4eed57a7f1b10828c14925c879b3028b9395d27b84de403bb6b84d0a8d6567c3a77cac2157724808bc6fb3b9f8fbf76101d79df
-
SSDEEP
768:DhS0o3fWnp+sFoEvA5qJtEQhonpg9dJVlW1T3ariMSx:DA0o3fWp+sA5eGmzJ+JbMm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 174690275adcfc09a2e9c3cd2eae2154_JaffaCakes118
Files
-
174690275adcfc09a2e9c3cd2eae2154_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
ANAKiN98 Size: 43KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ANAKiN98 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ANAKiN98 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ANAKiN98 Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ANAKiN98 Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ANAKiN98 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE