Static task
static1
Behavioral task
behavioral1
Sample
59edf7d2bb4538cda3ace29df16edb6d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
59edf7d2bb4538cda3ace29df16edb6d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
59edf7d2bb4538cda3ace29df16edb6d_JaffaCakes118
-
Size
308KB
-
MD5
59edf7d2bb4538cda3ace29df16edb6d
-
SHA1
8af5366a536d3a6436c6d83a34b2c64cd0d4d3e0
-
SHA256
289d76fd33adc4634142e30f098e2f009d9c323cb6f75d762360cfff1e66f6fa
-
SHA512
ccfe44cb463e5aae7a48ce888b8b5b5f9fd624f2fcc4eea07ff34134d0b1d01defbbf6750f593918b9d1f824c525074c57625157dedfbe0e887387a7f77b2104
-
SSDEEP
6144:VNJvEec5IYuG1C7tQEuwFxbsE19rROilPpXUd:V7vDc5IBsoplPC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59edf7d2bb4538cda3ace29df16edb6d_JaffaCakes118
Files
-
59edf7d2bb4538cda3ace29df16edb6d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
efss0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
efss1 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
efss2 Size: 245B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE