Static task
static1
Behavioral task
behavioral1
Sample
1b1a1b488eefe22944d762e3d1de068c_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1b1a1b488eefe22944d762e3d1de068c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1b1a1b488eefe22944d762e3d1de068c_JaffaCakes118
-
Size
578KB
-
MD5
1b1a1b488eefe22944d762e3d1de068c
-
SHA1
1fb092f2485ee9e2e5b578ddbe873de4d7bec2d8
-
SHA256
0bb09569d9e557615afc2593f54e55e6198c43a6b8566e071090998bd478251a
-
SHA512
c3a84a11619e9aa8ec2a2a3401a2f20f7e92352b2e2685b7772450586289f2f8fd9fc0cbf4f9ca886dcab92be4860ddc2cf0ed161fe9ed2c3ba1a8e4462439f0
-
SSDEEP
12288:hk+vceJ2HfgG+26geCaZnZfeZ1g+3dNvfp6s2ZJU344LapDISme69p588ox+MmAf:9vzeg7RWaNZS/3N6s0JU344sDBmHT5GF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b1a1b488eefe22944d762e3d1de068c_JaffaCakes118
Files
-
1b1a1b488eefe22944d762e3d1de068c_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
A Size: 207KB - Virtual size: 548KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
B Size: 7KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
C Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
D Size: 512B - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
E Size: 53KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE