Static task
static1
Behavioral task
behavioral1
Sample
a665f66f08e2924b2a30ac88321bfc62_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a665f66f08e2924b2a30ac88321bfc62_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a665f66f08e2924b2a30ac88321bfc62_JaffaCakes118
-
Size
47KB
-
MD5
a665f66f08e2924b2a30ac88321bfc62
-
SHA1
b1ae1e84725af53458dd1d51207fb79b06fb93cd
-
SHA256
958b54fb220644d06c99c7639158780c1f591d41f9e4f1142afca05e9177bb1b
-
SHA512
cf47e93595ce89f3876366004da31d578eed76540766b7bf9b4240520efefa1cff02bc00f0bb1325d4f98049060df56f1dd34a3771b75beb30cf3f13e816c8ce
-
SSDEEP
768:edBLgQNOfHrWcprG4iYLFZ5oN+f1bW1jIOlHT0:qqMOfHKckA/CKE1jIO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a665f66f08e2924b2a30ac88321bfc62_JaffaCakes118
Files
-
a665f66f08e2924b2a30ac88321bfc62_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 950B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ