Static task
static1
Behavioral task
behavioral1
Sample
59f550f08aab352df05c26d739117af8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
59f550f08aab352df05c26d739117af8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
59f550f08aab352df05c26d739117af8_JaffaCakes118
-
Size
101KB
-
MD5
59f550f08aab352df05c26d739117af8
-
SHA1
ee22eceb6d2fedf649e1e3c268f507311172a33d
-
SHA256
5a13dd057c48b06bf8130f6fe55c6300d7a4f3e57d97799b2fea349e9923f509
-
SHA512
5d11f0fd28830aaee4a3b040414db9a8b42983b3f2b4f10c519b35a44674b0d2699bda41242ab506d3884d688f7d1c3a45a87e4ac7bd74a737dd7dd4422dc22f
-
SSDEEP
1536:sJbVe/kEU7D02uRCFYRJSlwf/GtiO22ERZIiTAL:sQk37D02u8yRolwf/GIO22ERNTAL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59f550f08aab352df05c26d739117af8_JaffaCakes118
Files
-
59f550f08aab352df05c26d739117af8_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 637KB - Virtual size: 637KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 179KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.3MB - Virtual size: 19.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ