Static task
static1
Behavioral task
behavioral1
Sample
2408fe4555678e3e6a77c1fe1c11c83f_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2408fe4555678e3e6a77c1fe1c11c83f_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
2408fe4555678e3e6a77c1fe1c11c83f_JaffaCakes118
-
Size
597KB
-
MD5
2408fe4555678e3e6a77c1fe1c11c83f
-
SHA1
1edc7854b43a2ccce3216415c1a47a0630322c02
-
SHA256
d16bd9cb725ab0b59c35f24476f714e5d841e2f79656ee41958b38f2cc6a76c3
-
SHA512
f0f332b302e5f45c8096bb591609c9205b3e5e43558b6ec28862e4d5c7350351ba903c9f0c07be24684000a36dc91846e96a5d78bf040ec46b5e654ecb59a9bb
-
SSDEEP
12288:8p9HsRiBpsOW01PQAah3I5M1OT4ENTBn8E9vI8/XlZQYAm:fOuONT40TB8MvBdaQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2408fe4555678e3e6a77c1fe1c11c83f_JaffaCakes118
Files
-
2408fe4555678e3e6a77c1fe1c11c83f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
>OOO13vu Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
W5Xs_JYM Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RJ?xMjyS Size: - Virtual size: 11.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pH8+3n@* Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-HpR,u,> Size: 4KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
MU2>$5Dv Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Gc@1b;gr Size: - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
b[mjcl>u Size: 732KB - Virtual size: 729KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE