Static task
static1
Behavioral task
behavioral1
Sample
407956557bc38bdb3cc6f08f26723d7d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
407956557bc38bdb3cc6f08f26723d7d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
407956557bc38bdb3cc6f08f26723d7d_JaffaCakes118
-
Size
756KB
-
MD5
407956557bc38bdb3cc6f08f26723d7d
-
SHA1
c427c1f432b502f8741f16bb7758d8fa45502d77
-
SHA256
9b304293b1d3a89650a7d473d7d27e75f5dcc70fca2df983ab74ddc78f506b9b
-
SHA512
b9d0e06979e23e1713ed18071c576c05116df6fc47d97847feb3d496f0f3ad522d5c64fd2e38ff398668433db3569f71deac8014a62dbf16a21af618d17baf05
-
SSDEEP
12288:ZeZ/Mw1cSkCLjFYy708HLY2IVq9fj/5WxbfxBx7OwIgDMU5SipXJdDtLl57w:ZeZEokCvx/IQj/5WxbfDx7OwIsFpXJd2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 407956557bc38bdb3cc6f08f26723d7d_JaffaCakes118
Files
-
407956557bc38bdb3cc6f08f26723d7d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 644KB - Virtual size: 644KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 7KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 35B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mackt Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE