Static task
static1
Behavioral task
behavioral1
Sample
6640bee1275a5f92b58f43f4117f1385_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6640bee1275a5f92b58f43f4117f1385_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6640bee1275a5f92b58f43f4117f1385_JaffaCakes118
-
Size
72KB
-
MD5
6640bee1275a5f92b58f43f4117f1385
-
SHA1
38b25684af6edb9dff3f2a80c351bc60e7e36350
-
SHA256
4c9d0ad90d59e5e026ee0ce3959b97b8cb8baa9d780d1c278a4f217b48f0526a
-
SHA512
2ed314846f7c7505dfd5dc8c20e03b8b20d7006648e3773b253ef9bf89ff94ff7175869d830a9a5b29ba9ae4ebc170edf9538710b808a09d8af204d492f962f7
-
SSDEEP
1536:dPSSij8ks8HgWz0YI5NouOE5MCBXWwJZhZu8MTfOCQ:dPSSiQkHpw9gu5lBZhZLM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6640bee1275a5f92b58f43f4117f1385_JaffaCakes118
Files
-
6640bee1275a5f92b58f43f4117f1385_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 555KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 28KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE