Static task
static1
Behavioral task
behavioral1
Sample
b559d01c86edf1919dc95b8c54a8b315_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b559d01c86edf1919dc95b8c54a8b315_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b559d01c86edf1919dc95b8c54a8b315_JaffaCakes118
-
Size
126KB
-
MD5
b559d01c86edf1919dc95b8c54a8b315
-
SHA1
d445c7fbe47199447078fc5db086391bfa7df0f7
-
SHA256
df0ed2638bd7d2d40999df06fe5b154e4aacb18da8528186609f50dc94386f1e
-
SHA512
352bd4cbc1678be10ad5468942c94be3748fccea474db8b3c28f366d53bcbb032d4cba9149384ab74f0c6abd713d0f718fb1e9db1019ff4de93028e74cdf50d1
-
SSDEEP
1536:p3izqUQIcqoCRdSNgCnj66666UNUYSYDQmBxDntKj6EKSAzqbkq0GBLu0QlS6n9I:gcM+znj66666UFSYnBxYm7aXrTQlZn9I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b559d01c86edf1919dc95b8c54a8b315_JaffaCakes118
Files
-
b559d01c86edf1919dc95b8c54a8b315_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 237KB - Virtual size: 237KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ