Static task
static1
Behavioral task
behavioral1
Sample
897b3e3044df9dd2e97d72f4e6a506d0_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
897b3e3044df9dd2e97d72f4e6a506d0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
897b3e3044df9dd2e97d72f4e6a506d0_JaffaCakes118
-
Size
839KB
-
MD5
897b3e3044df9dd2e97d72f4e6a506d0
-
SHA1
d327ea690ed0f6e1439de71f9639d1f4af81915f
-
SHA256
187742c1b5505bf8c47211305226c202592c03469172dc0125f3284cc9cb72b8
-
SHA512
180050cbf33a526a8ab2214d00c73f001c144c8590724937e4117699b843e56f09c6b5bb1250deeaa101f2deacf2cba0fc1b370436f87c4f8a9a45ed37ec8689
-
SSDEEP
24576:N10Vxz7FHCys4M/25r9Okprp5jGeeR3Gw5crhV:v0Dz7FMWVS/ncrH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 897b3e3044df9dd2e97d72f4e6a506d0_JaffaCakes118
Files
-
897b3e3044df9dd2e97d72f4e6a506d0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 692KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.exe Size: 133KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE