Static task
static1
Behavioral task
behavioral1
Sample
acbb32ba909a1368a19906020f5efe5f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
acbb32ba909a1368a19906020f5efe5f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
acbb32ba909a1368a19906020f5efe5f_JaffaCakes118
-
Size
111KB
-
MD5
acbb32ba909a1368a19906020f5efe5f
-
SHA1
fc4d2b9fe054697bcc1cb6e8b7dee700b08a80b2
-
SHA256
e9bd84f4e44072879efd6e2732f7c8e8fe89d48d0f6053b830177ea733f205b3
-
SHA512
9e8faa3ea0932697340c5df2d03e268d03b53f1c517982a96af3aa86db44de718f6ea5ccab5a56b606940c37453438efbc5be5c2212370b2b2fc87441c89160e
-
SSDEEP
1536:p3izqUQIcqoCRdSNgCnj66666UNUYSYDQmBxDntKj6EKSAzqbkq0Q:gcM+znj66666UFSYnBxYm7aXP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource acbb32ba909a1368a19906020f5efe5f_JaffaCakes118
Files
-
acbb32ba909a1368a19906020f5efe5f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 237KB - Virtual size: 237KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ