Static task
static1
Behavioral task
behavioral1
Sample
271db4b83e247b7886d5dfa1cc67894f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
271db4b83e247b7886d5dfa1cc67894f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
271db4b83e247b7886d5dfa1cc67894f_JaffaCakes118
-
Size
79KB
-
MD5
271db4b83e247b7886d5dfa1cc67894f
-
SHA1
e1eda7de6501bd7a1b3ce57fe898866994bd1963
-
SHA256
8fb506b0463763908b20d7ba7262fa1cbee7b4b2750ac2b49d1e5f0e4bc69f8a
-
SHA512
45df711de723cb53d342a77c6b7efcb03f485e30bee065f890adf521013ffb34fb5ff67822458c0e31054a1a67fccb7963b123d1da79bb6b1cbed9221e503cee
-
SSDEEP
1536:jDu9PylqtofEqE/4FpFh4xV3mni9R2U0AxMyelvOQZclFd:jDYOKoMopT4z3lR2XAxTo3AFd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 271db4b83e247b7886d5dfa1cc67894f_JaffaCakes118
Files
-
271db4b83e247b7886d5dfa1cc67894f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 14KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 336KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 142KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE