Static task
static1
Behavioral task
behavioral1
Sample
83db2448c64a24a240ec997a1f334a80_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
83db2448c64a24a240ec997a1f334a80_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
83db2448c64a24a240ec997a1f334a80_JaffaCakes118
-
Size
192KB
-
MD5
83db2448c64a24a240ec997a1f334a80
-
SHA1
b5797f5edbbf2f065520d9c49ece018a0c57b6a9
-
SHA256
ac08fe9feede22d8cb49c99bfd7623a7b3afedb5f2b98483712363b63dbacf53
-
SHA512
8f787b9250ff57d9a994ed7f15671b3c019fd02ff268a4860ee75d1e86d5c4a16614954cfdb5fb6762e7b494c208302dc100f58ce1c11d39dd28c57caf156703
-
SSDEEP
6144:Dzvc1ZApV0ukMk7FnbkqVBl+ARHWyXg6Ht3UCWfwrCQmEPrKOFfI:Dzvc1ZApV0ukMk7FnbtVBl+ARHWy4C+p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83db2448c64a24a240ec997a1f334a80_JaffaCakes118
Files
-
83db2448c64a24a240ec997a1f334a80_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 173KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 619B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ