Static task
static1
Behavioral task
behavioral1
Sample
b4d2173e84be7c32730810ff3bbe8b1b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b4d2173e84be7c32730810ff3bbe8b1b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b4d2173e84be7c32730810ff3bbe8b1b_JaffaCakes118
-
Size
16.7MB
-
MD5
b4d2173e84be7c32730810ff3bbe8b1b
-
SHA1
ec30437962efb76f976defc0fe90adb582248b17
-
SHA256
313c7e164fd0d49405f4b0d0e0ecd597d9fe8c5f63655464ceea0884b13f56b7
-
SHA512
1353265e3b660e4d9e120d9f1e7fd8e7838ab47ad97574e1a37646a1cb39b262ce251b0ccec474b2df1dcbf5cd9177194772a52e84cd41de18da9924a6df462d
-
SSDEEP
98304:jjd7VZ5fdIZtGTZAMApru2IUnvqgG2a4f/n/T0l24HfAmNILR:jjFHZAMApq2w4f/n/T0s4YmN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4d2173e84be7c32730810ff3bbe8b1b_JaffaCakes118
Files
-
b4d2173e84be7c32730810ff3bbe8b1b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 960KB - Virtual size: 960KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.delete Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 14.3MB - Virtual size: 14.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pklstb Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.relo2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ