Static task
static1
Behavioral task
behavioral1
Sample
652b279095aa6b9deac0a0c82aced983_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
652b279095aa6b9deac0a0c82aced983_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
652b279095aa6b9deac0a0c82aced983_JaffaCakes118
-
Size
2.7MB
-
MD5
652b279095aa6b9deac0a0c82aced983
-
SHA1
f588d3803bd73be883dd6f65ff2929815163e5d3
-
SHA256
41c601307dda09b0a79840f7b64c4ff6da53e586dd86a9d577d7c2371e7c556e
-
SHA512
a4cef0e4fd4034b77a6695256d0abf3011033a1e2915bb1511ddb64ab60b6f97f5c9df08cc50857fbf99359528aaa99fc85cc8d88f695c9ba4025589d5c1efa9
-
SSDEEP
49152:dehsmRIG/IC/lhxEtY+qVcvWePIPZV+75Onpm1PYaay/sEnNrYumy+NPo:esmRnh2Gg9wXkZZNrYuI1o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 652b279095aa6b9deac0a0c82aced983_JaffaCakes118
Files
-
652b279095aa6b9deac0a0c82aced983_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 365KB - Virtual size: 836KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 12.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.x01 Size: 2.3MB - Virtual size: 12.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yys0 Size: 12KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE