Static task
static1
Behavioral task
behavioral1
Sample
259e5d7c41423c4ad8145ff5fc3fb616_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
259e5d7c41423c4ad8145ff5fc3fb616_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
259e5d7c41423c4ad8145ff5fc3fb616_JaffaCakes118
-
Size
1.1MB
-
MD5
259e5d7c41423c4ad8145ff5fc3fb616
-
SHA1
11fe9ef179f4056ab304abe7d9bcbd1e6399ce87
-
SHA256
43afa9f6f710e352f49f51ade2df76112e507626c6f05cc8a7089ee90386241f
-
SHA512
f62cba20edb3e10d11d3577cd989fc2904902fe46ac3bb018af6160a931b7968a13c3ae4820b94fef95d93c2aa74758034ac53733bb23238bf5849dbdb7d8fb9
-
SSDEEP
24576:/StU4gf2EW5A2DJr/kS4vGIk6v3HNdqElo8Fqinyn9V9:/h43Dp/wPH678Fqw49V9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 259e5d7c41423c4ad8145ff5fc3fb616_JaffaCakes118
Files
-
259e5d7c41423c4ad8145ff5fc3fb616_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
mian0 Size: 796KB - Virtual size: 796KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mian1 Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1212 Size: 100B - Virtual size: 100B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RPCrypt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ