Static task
static1
Behavioral task
behavioral1
Sample
247983da41f26cb3cfd8b97f3cec1799_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
247983da41f26cb3cfd8b97f3cec1799_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
247983da41f26cb3cfd8b97f3cec1799_JaffaCakes118
-
Size
1.2MB
-
MD5
247983da41f26cb3cfd8b97f3cec1799
-
SHA1
854999d6ed4f471bf47c8aedcd291a612e6eabd9
-
SHA256
b9dcec81e73081e6e89bc0a0f6973b003bf602ec195f8afb65c69d7421f558d6
-
SHA512
4c89f7026877b6c15b70a80dcbf7c8405f68c22560252e04a70642202742f182321eb0b8fbf8b4d072ee0ad2e42c250b73be8922b18afb82176dc18469fde4b3
-
SSDEEP
24576:4aytpCYDu4WBEU4gO3+ZQi+1O1q3f9kYtp:4aOEvNZQ5e8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 247983da41f26cb3cfd8b97f3cec1799_JaffaCakes118
Files
-
247983da41f26cb3cfd8b97f3cec1799_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE