Static task
static1
Behavioral task
behavioral1
Sample
66138354f85c1aa875b68866626a19fe_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
66138354f85c1aa875b68866626a19fe_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
66138354f85c1aa875b68866626a19fe_JaffaCakes118
-
Size
369KB
-
MD5
66138354f85c1aa875b68866626a19fe
-
SHA1
973ca8eea3f063b9819242468c0f6a4e0e7b73b3
-
SHA256
7fba5dbc12b2db5575b157303921e9152f708708a4974e73a6e799230e89e756
-
SHA512
e03a503ea1931d6e5a959a04bf90bd10adb69e2a8109c090c3945de7b4215af3ef482dc5ceeccbea952873be5d6b34018c208438c1418d21710e322dc13865bb
-
SSDEEP
6144:Khu2TDjsfXTyj2Q/FpxMCwsoiCUqbPaT5f/zFfOTSMO28lvRngPK14hTvH4upiJe:MT3wXE22pxyVaNXzFCFCYTP3kJipD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66138354f85c1aa875b68866626a19fe_JaffaCakes118
Files
-
66138354f85c1aa875b68866626a19fe_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ