Static task
static1
Behavioral task
behavioral1
Sample
2271613c3d90d4cae5d3e282a7d526c8_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2271613c3d90d4cae5d3e282a7d526c8_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
2271613c3d90d4cae5d3e282a7d526c8_JaffaCakes118
-
Size
2.2MB
-
MD5
2271613c3d90d4cae5d3e282a7d526c8
-
SHA1
1a84697a2cc255bf3ead4e1787e7c1064f19c448
-
SHA256
084e1a093fa96216f477e00335433faa2ececcb017c3bcdac345c9a3e5446eef
-
SHA512
d1ac4c7c879c8cb479c6b506697336acc79828e5aaf72808227f96e22c7d339bd75da08b4529d5fe3280f00145eaac3ade15121690cc6130c04a38a6dd761be4
-
SSDEEP
49152:tTALliXYW290GL3Qiji4gIPYiiqowvq00p7PiKXT8pYiguSlRg:tTmiXYW2aWeIrwzXopYigVlRg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2271613c3d90d4cae5d3e282a7d526c8_JaffaCakes118
Files
-
2271613c3d90d4cae5d3e282a7d526c8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 676KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.1MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sys Size: 383KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE