Static task
static1
Behavioral task
behavioral1
Sample
218216313e959475b542d529b9ab8df2_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
218216313e959475b542d529b9ab8df2_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
218216313e959475b542d529b9ab8df2_JaffaCakes118
-
Size
2.5MB
-
MD5
218216313e959475b542d529b9ab8df2
-
SHA1
4cd14b9f7c787d29f25bb6124665e721e76065b3
-
SHA256
da5a7d78ed4ce3c8e7a33692907e934424d59c16c76212ed21135e3e44cd5f0b
-
SHA512
3fbc602a3ff9cdb40b75227ab852bfa993271148f4d8458b809a14b866b5e1afbb6f36b3fa9a997f592038da0c062bbd8368aec616df112e97b87620f0306ba5
-
SSDEEP
49152:vfMzhESaRtNSM88Wyrgb6TuBCINjR8O5ZjxcZ5B5yRGcOU7m6ml+:vfMeSasMkQgb6hi1OU7ml+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 218216313e959475b542d529b9ab8df2_JaffaCakes118
Files
-
218216313e959475b542d529b9ab8df2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 291KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE