Static task
static1
Behavioral task
behavioral1
Sample
881972301ec9e95e8b6984c5b2b5d227_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
881972301ec9e95e8b6984c5b2b5d227_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
881972301ec9e95e8b6984c5b2b5d227_JaffaCakes118
-
Size
445KB
-
MD5
881972301ec9e95e8b6984c5b2b5d227
-
SHA1
7c48d5e6a4e61e3128548995bc8d0c43df1f5141
-
SHA256
568539ac41f9400d6ceb53888b86ebe0f8ed582ba07aeb4afb889bd9bba9f985
-
SHA512
6515436f54df278bea11d06ca96445dba2d4b2183d74a88b2ac473a44fa3aabc9d497581990ed2705a7676145b09a5f28794e909bb971c9a14c998bcdefe26df
-
SSDEEP
6144:360COb8woADieL/6ae/axfhbUhF8svF62AKJY/XugzkrLWv5880tf6Dh/l6nt5N7:gOQwoADiVa328F9/Xl58btCX6toJop
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 881972301ec9e95e8b6984c5b2b5d227_JaffaCakes118
Files
-
881972301ec9e95e8b6984c5b2b5d227_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 375KB - Virtual size: 375KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ