Static task
static1
Behavioral task
behavioral1
Sample
736bd97767afbc712da99e3ee8ee8f48_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
736bd97767afbc712da99e3ee8ee8f48_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
736bd97767afbc712da99e3ee8ee8f48_JaffaCakes118
-
Size
550KB
-
MD5
736bd97767afbc712da99e3ee8ee8f48
-
SHA1
c194d29d780401b998cef4e304155ee337993799
-
SHA256
e07927484f437ea3ce61283f0334621f338126908be54084be54f11a8a4f6681
-
SHA512
e1352cf310458092e00489b08c3795578db8cdff5cae9a94c35f3c7ceb15255ba363e0242e0d521503e6cde0a0378ae66b36b9df8d853dba6e23f74a1bcbe93e
-
SSDEEP
6144:tk+TCjTavU5G+yJbihEufy8nGHi4crrBMWdG29gQBnBEpxyLE86TfNXtCXBfZgoI:WmCjTa5fp3ASKDBGxyL1euLYJHL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 736bd97767afbc712da99e3ee8ee8f48_JaffaCakes118
Files
-
736bd97767afbc712da99e3ee8ee8f48_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 12B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 414KB - Virtual size: 414KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ