Static task
static1
Behavioral task
behavioral1
Sample
220eabdf122ccf06a0c1ff1c1e950d82_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
220eabdf122ccf06a0c1ff1c1e950d82_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
220eabdf122ccf06a0c1ff1c1e950d82_JaffaCakes118
-
Size
455KB
-
MD5
220eabdf122ccf06a0c1ff1c1e950d82
-
SHA1
318d7e6e0ead8243b5e5107b0111688bfb61b5c0
-
SHA256
950eb2e2cf59905fd95ab4521e46da13354d0166a425e4c8e3889b435be93939
-
SHA512
bd525ee913f6b29772d9a5cd3f8f139f945460673113ac8e3bfd69ca46be9fa4077700bcd4c49a8da7b4c51533e6f0a6ab09a5bc3c78491a417f2d5d835daf75
-
SSDEEP
6144:/PR89jMebpM7vXIqjifBaqKhPie2yZmo9GgYJ9Icqu:XR+jVpw50a7Jwa9G91qu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 220eabdf122ccf06a0c1ff1c1e950d82_JaffaCakes118
Files
-
220eabdf122ccf06a0c1ff1c1e950d82_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 275KB - Virtual size: 274KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 158KB - Virtual size: 157KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ