Static task
static1
Behavioral task
behavioral1
Sample
59a2190b2a54d230eb40d7f7af7c5248_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
59a2190b2a54d230eb40d7f7af7c5248_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
59a2190b2a54d230eb40d7f7af7c5248_JaffaCakes118
-
Size
737KB
-
MD5
59a2190b2a54d230eb40d7f7af7c5248
-
SHA1
6f425001e6716410f5e54ef580c3daab745ab103
-
SHA256
140e11f1046a2624aea39bb92a177b80afd0dcd75e128755431ddf3639f92326
-
SHA512
65252c3c3842593d136a1c71f4caaac17e3b12ed654458c2db66544024a83f5450bbc8820a918813632f7f0950d1423c278e0773eafef52c5c9ff4a81953f1a2
-
SSDEEP
12288:6s2UVtQ+RGfWzI0aMjBJ0btXTfWWV9BDYsDwT3ngYK78BKKOmpxZ4p4040upFfJ:696Q+RGfWsMtJ0RXTfWs7DKCmvO+4K0E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59a2190b2a54d230eb40d7f7af7c5248_JaffaCakes118
Files
-
59a2190b2a54d230eb40d7f7af7c5248_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 146KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 569KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE