Static task
static1
Behavioral task
behavioral1
Sample
31f71bed19f559fcd64c1246cf7a268f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
31f71bed19f559fcd64c1246cf7a268f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
31f71bed19f559fcd64c1246cf7a268f_JaffaCakes118
-
Size
82KB
-
MD5
31f71bed19f559fcd64c1246cf7a268f
-
SHA1
d05a9871da69142b1079af8f1f27f15dbc9c8f72
-
SHA256
0b50859b62c65798f0d76fdaebe8ed885b695283965ace0d9a81ce1557bcce30
-
SHA512
7b4bd063787e036f05c4088faed62e6a8c299cdf6de4379e27aea62e7149044f7f839fa3cea36404bac123709f23a5eb299d7b38743c96f32b3d4bf7cfdc7d9c
-
SSDEEP
1536:7Oz1TJKqOOs+e0aX4SSsAjhYJXZ+/Dt4Hp23YFGwm03:7O5TJK5Z+eJoSSswhYJJq54I8GJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31f71bed19f559fcd64c1246cf7a268f_JaffaCakes118
Files
-
31f71bed19f559fcd64c1246cf7a268f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 12B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.delete Size: 512B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pklstb Size: 52KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.relo2 Size: 512B - Virtual size: 78B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ