Static task
static1
Behavioral task
behavioral1
Sample
858a0a521f51961313693f488e1a2c46_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
858a0a521f51961313693f488e1a2c46_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
858a0a521f51961313693f488e1a2c46_JaffaCakes118
-
Size
117KB
-
MD5
858a0a521f51961313693f488e1a2c46
-
SHA1
76da62bd08c66aa5c083e4275c09cbd505d6b845
-
SHA256
b8b9036d26bf77d89004ca1529bf72acbd584a94cd2d5bc2b95a57c6dbb7dd09
-
SHA512
ebe70ac354563ec37775765ec4246ef667f4b6175a7545abee4cb06efba7b11780da303ec562214d7c16f829673fad442cf2919b23e7ec8554825ef5432a67de
-
SSDEEP
1536:FJuPwwaP+U4ZzM4DkIUobpwdXbzNULTtyOk/5jwe5uGi223QogVdsW+jnu8AYukE:buPwpDqzMokIUoo6v55em8WAbf/j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 858a0a521f51961313693f488e1a2c46_JaffaCakes118
Files
-
858a0a521f51961313693f488e1a2c46_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.ys9yhg Size: 1KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.4knn8e Size: - Virtual size: 172B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pj1$bl Size: - Virtual size: 65KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.5rjhyu Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.opynl0 Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.3rxqbq Size: - Virtual size: 53B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orvdgh Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rbss Size: - Virtual size: 3.0MB
.null Size: - Virtual size: 460KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.packed Size: 114KB - Virtual size: 116KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE