Static task
static1
Behavioral task
behavioral1
Sample
9522e527ddeb571d5d1eb20c6cf4286c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9522e527ddeb571d5d1eb20c6cf4286c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9522e527ddeb571d5d1eb20c6cf4286c_JaffaCakes118
-
Size
3.3MB
-
MD5
9522e527ddeb571d5d1eb20c6cf4286c
-
SHA1
b675d759d5df7dfe9bc782567d705b3a52aec23a
-
SHA256
5e87510ae9eddcf60a4156319d3c33ef8a03f60b626c1517ff7b7cca70847a4d
-
SHA512
bd15498a456d4b2e681ea4a86ed703f248901e6961f3e11027cfccd0166c80a728e67a012be6e0c0bcfae938e9a1e180cd2d447df1a9f7bdd6cc6d04e5b77d7b
-
SSDEEP
49152:8lJcRiTDTEHXCpczGfncHfe4yj6O6O4mlU:87ckT/fazonc/lA6O6Fj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9522e527ddeb571d5d1eb20c6cf4286c_JaffaCakes118
Files
-
9522e527ddeb571d5d1eb20c6cf4286c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE