Static task
static1
Behavioral task
behavioral1
Sample
b53383b9fb96aa88e972d931f589b624_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b53383b9fb96aa88e972d931f589b624_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b53383b9fb96aa88e972d931f589b624_JaffaCakes118
-
Size
1.3MB
-
MD5
b53383b9fb96aa88e972d931f589b624
-
SHA1
d3b71f7a954c183094394674884a3524ad3b8bd4
-
SHA256
4164614225348ca8a57a5c2b9e392fc394fd8891d84623d3c30d54510430540a
-
SHA512
928f5dd1f4550ae720e6502c668d6d6c7cc3576551124a2a0a76bd39cf6abeab3da4c33cb9800197d2424e47409efdb5e7bdfa58df011ffb16e7c6501b5b4322
-
SSDEEP
24576:EQRrt2Qdn+B8p1o/1b257DTFxtRTdqGjw+M0DJhrxkBEnHhKUcxpCRE6aVV:bRh2RK1YSn5nPM0DJhrpKDxpYOV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b53383b9fb96aa88e972d931f589b624_JaffaCakes118
Files
-
b53383b9fb96aa88e972d931f589b624_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 383KB - Virtual size: 928KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.5MB - Virtual size: 17.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE