Static task
static1
Behavioral task
behavioral1
Sample
665c8848d002842ba25839bfb585ef4c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
665c8848d002842ba25839bfb585ef4c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
665c8848d002842ba25839bfb585ef4c_JaffaCakes118
-
Size
696KB
-
MD5
665c8848d002842ba25839bfb585ef4c
-
SHA1
05dc5ee7f521766940ff2421bfe8d9bb30bb09f3
-
SHA256
16b91fc6275dd3d6fd8a2f3a915edc02accdca7214aade2b0021b14a428d8269
-
SHA512
47df24020429639d45ef3c4d6f252e57dd718ee35e21eb64c7e1ebb59b82c6806b8146babecd28a06f2f252e09a201c5cdd891319e874608bf7c36bdb9ce61bd
-
SSDEEP
12288:RgpPb/m68AXNL09Am2zg27BwMWFQARbQoqMF3Z4mxxvC94UW9T/qHtVeQ49:2pPbO2iqbzVzaQARboMQmX694UWhqveh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 665c8848d002842ba25839bfb585ef4c_JaffaCakes118
Files
-
665c8848d002842ba25839bfb585ef4c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 808KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 378KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE