Static task
static1
Behavioral task
behavioral1
Sample
89fec9b55d50360b6eb6a58adfa31aad_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
89fec9b55d50360b6eb6a58adfa31aad_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
89fec9b55d50360b6eb6a58adfa31aad_JaffaCakes118
-
Size
1.2MB
-
MD5
89fec9b55d50360b6eb6a58adfa31aad
-
SHA1
f02ab621484ca14872dad23c3a65e0dc62548b77
-
SHA256
d7dfe5364b6b5108342ef9e6f542cf71ab18de82e68566aee057339af2d24712
-
SHA512
7dcb5078e6ffc091f44eb9c5f8697eace6be6ea0d9575b27f9917a455d4c4661338ebb0e5cc150d3291417dfabe025fcfc24eb7dc62fadf43964ea77385fbc34
-
SSDEEP
24576:XmlB2pboB4Izoa6VEHscvPI4ImnYCvMr6r03g1VepnnGUNLVKV:2lBk0V6VQsiI47nYCvMrXwPepnnGq8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89fec9b55d50360b6eb6a58adfa31aad_JaffaCakes118
Files
-
89fec9b55d50360b6eb6a58adfa31aad_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: - Virtual size: 401KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 7KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.delete Size: 512B - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 917KB - Virtual size: 936KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pklstb Size: 249KB - Virtual size: 265KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.relo2 Size: 512B - Virtual size: 78B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ