Static task
static1
Behavioral task
behavioral1
Sample
a67cb2ac68d04c234bfc42043d6fbb9f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a67cb2ac68d04c234bfc42043d6fbb9f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a67cb2ac68d04c234bfc42043d6fbb9f_JaffaCakes118
-
Size
762KB
-
MD5
a67cb2ac68d04c234bfc42043d6fbb9f
-
SHA1
42133422b176b9ca947594bd5b2a7760d9dc4879
-
SHA256
2f91356d95dad770357b341ff232cff0751903a219cde625725f4e484725a05e
-
SHA512
1027b1b78e06ba40c408192c6cbc41c2f2f9b9915e35556f46b2a81759f86d1057c3681b57db1906529ca74757aefd0c697c5308f14e9b9765d1af5498c81606
-
SSDEEP
12288:hBawCDjFkGrIrJRkr948c8Aero69uHRxzlFKdV5FIZz00COdNUd:hhAkGr6R18AKQx7obIZz0gUd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a67cb2ac68d04c234bfc42043d6fbb9f_JaffaCakes118
Files
-
a67cb2ac68d04c234bfc42043d6fbb9f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 578KB - Virtual size: 578KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ