Static task
static1
Behavioral task
behavioral1
Sample
b55d61ebf9c01f9fbdf6b0c4a61c5798_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b55d61ebf9c01f9fbdf6b0c4a61c5798_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b55d61ebf9c01f9fbdf6b0c4a61c5798_JaffaCakes118
-
Size
287KB
-
MD5
b55d61ebf9c01f9fbdf6b0c4a61c5798
-
SHA1
c091ae04ef9b1e78bba33a216b68138ad0f3dc35
-
SHA256
cc61a3fe2f1eea30b957e4bcbbd2571fb4afe8c9848f69cd1d425f00023654a2
-
SHA512
f06f4db595f90e357fe559bd48ae9d155e2887443cde128c1877593443b9b8e23b912125a105b15ba13f979cfacf111a0762962d6dae4c8e75f3135ab6c179d0
-
SSDEEP
6144:tw5851ZPASvq+HUEI7bt1AlH7pBk0eDUzIvCLbjFby4D2Jv5KqIhm:K651ZP9vq+0H7X+kNDUz1LvS5z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b55d61ebf9c01f9fbdf6b0c4a61c5798_JaffaCakes118
Files
-
b55d61ebf9c01f9fbdf6b0c4a61c5798_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 44KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 31KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE