Static task
static1
Behavioral task
behavioral1
Sample
59f43fa99834dc2480b620a3b2c79814_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
59f43fa99834dc2480b620a3b2c79814_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
59f43fa99834dc2480b620a3b2c79814_JaffaCakes118
-
Size
775KB
-
MD5
59f43fa99834dc2480b620a3b2c79814
-
SHA1
869c054a5088e671d40496d6d1a2df2fa01da81c
-
SHA256
c24fbc2a2e8789cf982a9b04abf088239f7cb4d43428a7a7cd7d895be27eb5a6
-
SHA512
44231198a9ae68ab6fe686972ea8d51404721402a090658393d8aee4637582c95ddbe135a6fc917bfc6f04ef986f5ca40c1d21641bedd1a9c55f3b178620d0ce
-
SSDEEP
24576:nhjHVXJ3U/MwpKRaDDQ4wP6vs/uQmXWAaM2pTB:hjHTE/2j4wSvg3mmAp2pB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59f43fa99834dc2480b620a3b2c79814_JaffaCakes118
Files
-
59f43fa99834dc2480b620a3b2c79814_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 844KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 459KB - Virtual size: 464KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE