Static task
static1
Behavioral task
behavioral1
Sample
442927ada8f6d2f963e2696a625cd856_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
442927ada8f6d2f963e2696a625cd856_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
442927ada8f6d2f963e2696a625cd856_JaffaCakes118
-
Size
643KB
-
MD5
442927ada8f6d2f963e2696a625cd856
-
SHA1
dbfaadc2f36bb9b00e6a048ecfd839cb0cab5e29
-
SHA256
2459e5ec7a320197e894f273967aa9a464f1bf9648e0bc8074ed6b63b47520cd
-
SHA512
68ccd02924d91fec17cbc7e06a6189d0eb283836323f0aae66cce444ef966d2ce3b466b719590521f2cb5469d17f5e0e0c214acbe8005cf7a0aeab9d718d7b85
-
SSDEEP
12288:EW6HrvXZku1NOg1nr5DhwZeBvQdRMhIeNxGA/A4DB5/LEkc6:QzX118g1r5De2v/hIe/GAJDD/LEY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 442927ada8f6d2f963e2696a625cd856_JaffaCakes118
Files
-
442927ada8f6d2f963e2696a625cd856_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 269KB - Virtual size: 664KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 370KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE