Static task
static1
Behavioral task
behavioral1
Sample
7236572b9a6579e7b02ca8f806102c67_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7236572b9a6579e7b02ca8f806102c67_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7236572b9a6579e7b02ca8f806102c67_JaffaCakes118
-
Size
144KB
-
MD5
7236572b9a6579e7b02ca8f806102c67
-
SHA1
80a8f6a241137f7338ac2fa373467f20059ed86b
-
SHA256
a597fdbe8fa730d07e2a178b2163a88c630ec556f0790f5bce80a528d3b84ebb
-
SHA512
4256d11b0a06ad31b27a6aa441b80a8caa77c6f0a05eba7e750d8818b160ce12b660db0b8b32133b18bfafe88acf68595326d95f65c415a4a83be2271b33b0dd
-
SSDEEP
1536:Dplq9QEB8svkvHNeI9Vv8mynqkl9sYPmTx7wK/ZFJClA8WS2oftuaOY:ORB8sKtB9h8hnVsYPmTx5xFwipkN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7236572b9a6579e7b02ca8f806102c67_JaffaCakes118
Files
-
7236572b9a6579e7b02ca8f806102c67_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 11KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ