Static task
static1
Behavioral task
behavioral1
Sample
b16120de1e3ef3f160ee6d6a5ac6be1f_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b16120de1e3ef3f160ee6d6a5ac6be1f_JaffaCakes118
-
Size
1.1MB
-
MD5
b16120de1e3ef3f160ee6d6a5ac6be1f
-
SHA1
3fb1d82d7badc92f581142bdd531c91cc690d86c
-
SHA256
b1a62aad3212e7402081ac781c484d7c1e639299dfde5d539e4fd231ea9c09fe
-
SHA512
cb0b8364f4c08fcf122c42e23b4b13c0a05fbd26475934fab722a3189017f4e5179d6fb370971bf5e1494e833bc7f5dc1f91bd2d739682109fa9299fe71be704
-
SSDEEP
24576:6x7Wbem0scdQ5bXJgRB0wwoaxMBdUktmdhpybb0:6IaAFFJEB0wb+QFm7pybb0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b16120de1e3ef3f160ee6d6a5ac6be1f_JaffaCakes118
Files
-
b16120de1e3ef3f160ee6d6a5ac6be1f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 592KB - Virtual size: 592KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.delete Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pklstb Size: 384KB - Virtual size: 384KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.relo2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ