Static task
static1
Behavioral task
behavioral1
Sample
319ef17a8a2c3a8395b931af1e7a152d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
319ef17a8a2c3a8395b931af1e7a152d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
319ef17a8a2c3a8395b931af1e7a152d_JaffaCakes118
-
Size
31KB
-
MD5
319ef17a8a2c3a8395b931af1e7a152d
-
SHA1
f2f16abcfa67672494a67818f4c6aa892c58e475
-
SHA256
a8bbd6e72a9a64aedc95b43e2d3b323ccc8dc70f58bdc546124c965d43377a76
-
SHA512
7d00d0fd5aa5fc648f43648b0121bda6c8db4775a95cbac174f7ed2d33165ecb0ca11a1ebe7c4f4f5d4b2c59e2cb1b70443ebd5b665647782b06b3f975f0d61b
-
SSDEEP
384:1aOe0LPXH5HTk6y2NAFHdT/DJqVyCu6bHvHabn6PN+A0qk1B7K2FOJFurOBUMTaJ:1BX5HvY9TD8eqHvHcWKqgA2FyFusG8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 319ef17a8a2c3a8395b931af1e7a152d_JaffaCakes118
Files
-
319ef17a8a2c3a8395b931af1e7a152d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 593B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 526B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 460B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ