Static task
static1
Behavioral task
behavioral1
Sample
59add3d6dc19bcee5ba2495c1bbf5b85_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
59add3d6dc19bcee5ba2495c1bbf5b85_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
59add3d6dc19bcee5ba2495c1bbf5b85_JaffaCakes118
-
Size
5.0MB
-
MD5
59add3d6dc19bcee5ba2495c1bbf5b85
-
SHA1
6d0e35351e6c79f8da0d3e08705bbda7b0780e57
-
SHA256
e502750a33b0a07cc81e60f6ae2fd0a747c50bfaa87d6e0e1d1472091e1ebea4
-
SHA512
d88219c47fd3f377fdb762190f67ab78402061ab05dc9227ae6efe0fc65a225d862d74b0e4b1874e44f04b95ee6b5e8e46d3ee11a515d59093ac75325f5f12e5
-
SSDEEP
49152:u6Fqxtbe4JOrr8rrrrihrrrirtE3eLUdNH24H/8j+ZeN:u6Fq3Orr8rrrrihrrrirtE3eLUd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59add3d6dc19bcee5ba2495c1bbf5b85_JaffaCakes118
Files
-
59add3d6dc19bcee5ba2495c1bbf5b85_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
A Size: 684KB - Virtual size: 688KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
B Size: 11KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
C Size: 10KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
D Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
E Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
F Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE