Static task
static1
Behavioral task
behavioral1
Sample
59a4ce90db7d9bed49becf356cfd22f3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
59a4ce90db7d9bed49becf356cfd22f3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
59a4ce90db7d9bed49becf356cfd22f3_JaffaCakes118
-
Size
1.5MB
-
MD5
59a4ce90db7d9bed49becf356cfd22f3
-
SHA1
68ce626ddccb07bbc3e685693e66f4e6b419fafb
-
SHA256
ca589e0922d6849e9a6cc101a611e6a14bb970f334fdfbc3885471e6e70b8075
-
SHA512
7d4fda0b6b9571607fa01e3cef38c9056dc022abbfb8e9473267f687d1a6248c2df84db4f0017e1cb6c097b4b897c2c8416e0266553637a349f453c8c8784e41
-
SSDEEP
24576:qb+h4TRCpb1ErSrIUkfEJMOfIA+HmWH1NYcB1AYjDLprNTcNT0/2JdIGMeGC+:qb+7cSzkVmWjF1AIDYT0/6OV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59a4ce90db7d9bed49becf356cfd22f3_JaffaCakes118
Files
-
59a4ce90db7d9bed49becf356cfd22f3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 802KB - Virtual size: 802KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 131KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 135KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 436KB - Virtual size: 435KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExeS Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MaskPE Size: 512B - Virtual size: 369B
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE