Static task
static1
Behavioral task
behavioral1
Sample
1af350d7ac8819627d32c7aca5d97855_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1af350d7ac8819627d32c7aca5d97855_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1af350d7ac8819627d32c7aca5d97855_JaffaCakes118
-
Size
235KB
-
MD5
1af350d7ac8819627d32c7aca5d97855
-
SHA1
0c115eb891d4d48a033d307ce0b7e916f31b51c7
-
SHA256
c5d9f920dcbc46a44434d12197d0bd6759ea5a3d5a312f8a5aecbe95cafbd0bb
-
SHA512
4138ee057f48c6400a6b35b4756fba2d58bf20759b2611b69aba00a21866537a99a28e0f2315bfcfa7be2a8fa676adbde2f167586647272a1c9dd9356542f6cb
-
SSDEEP
3072:dzuxOX3+25u/ylWa0Ub3XPhbJkWKvePM9N05BDPAvzzTEadYqVSiZ1DSaeOTv3KI:dtphFJk7GdyD/vfZ1DSEvqkD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1af350d7ac8819627d32c7aca5d97855_JaffaCakes118
Files
-
1af350d7ac8819627d32c7aca5d97855_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: - Virtual size: 305KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.delete Size: 512B - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pklstb Size: 196KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.relo2 Size: 512B - Virtual size: 78B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ