Static task
static1
Behavioral task
behavioral1
Sample
405123d0849976dc611313a11e777af6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
405123d0849976dc611313a11e777af6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
405123d0849976dc611313a11e777af6_JaffaCakes118
-
Size
4.8MB
-
MD5
405123d0849976dc611313a11e777af6
-
SHA1
653fa95c9d043d9e6985173b26838eb4fe1a86ea
-
SHA256
e98f5d7c1c2c8389beca04868befe9323513ad73b4c0323825eae4272c0f78ef
-
SHA512
d1618353b680fe0501652802626102b1c08cd9f57abfa10b73517d9191e55e2a95be76d65318a0f9d1bcfa433f46836ff035dce57b4487e943aa5cdc131d4c25
-
SSDEEP
49152:Amtzd06EXwAZMdedtUitaodhLTOZosW3OLsCW3G9RXAm1qyl+Dglq+3JmfS0+1tQ:ASzd0RAAZZ/P3Qg3sXAm1BPloat8VMKp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 405123d0849976dc611313a11e777af6_JaffaCakes118
Files
-
405123d0849976dc611313a11e777af6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_UP_SYSTEM_ONLY
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 64KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
h9emq5so Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
bmau68jo Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 967KB - Virtual size: 968KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
bg984ylu Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
q5fkb1e0 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ