Static task
static1
Behavioral task
behavioral1
Sample
869682432de60634bec447ebf76065be_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
869682432de60634bec447ebf76065be_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
869682432de60634bec447ebf76065be_JaffaCakes118
-
Size
18.1MB
-
MD5
869682432de60634bec447ebf76065be
-
SHA1
96d61e7d5220a42834008db3a26f42d882f3a17b
-
SHA256
fe02ca8584863eb496160233b253f66e871e11a972616043969dde0670e1820b
-
SHA512
db2681a1a837b5428ef24b2581ef06a2c4b793612899bba74e537693c7dd053302c9f57880cc85c7a5aed66c9af687768b8364fb82ba0ec8f3402e2750c9767c
-
SSDEEP
196608:uEP3YpF7qLxzMbMMMM+MMMK03qHEACNxxOHxNlnUE:u43YpIzMbMMMM+MMMK03qHogxNf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 869682432de60634bec447ebf76065be_JaffaCakes118
Files
-
869682432de60634bec447ebf76065be_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1014KB - Virtual size: 1014KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 17.1MB - Virtual size: 17.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ