Static task
static1
Behavioral task
behavioral1
Sample
a58f81accfc4747febe5e1ab4f173f58_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a58f81accfc4747febe5e1ab4f173f58_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a58f81accfc4747febe5e1ab4f173f58_JaffaCakes118
-
Size
1.1MB
-
MD5
a58f81accfc4747febe5e1ab4f173f58
-
SHA1
0a394329355bfae1f0b4d6edf82a825554e1734a
-
SHA256
b0f54eda089fd81c9846ae925c1db6f87b082fd98b6d74424a43f2c7250f5387
-
SHA512
4b17b939e0184f6be892a1001eac775c547a35715873731fb578fd683f3ca2674432c57d52767e7a7a7a7d672bbe8b83c1c9418d3b6415d38b925b1105ad65e0
-
SSDEEP
24576:/kMmkkNUR2P4oBemrF9xiJet2XmvtjoW1F48E5DY6umrrCxV4:/kMzIQWpO0t22vytMmrrC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a58f81accfc4747febe5e1ab4f173f58_JaffaCakes118
Files
-
a58f81accfc4747febe5e1ab4f173f58_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 152KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 348KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 616KB - Virtual size: 616KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE