Static task
static1
Behavioral task
behavioral1
Sample
b854d895480a6973ed33d224434a4470_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b854d895480a6973ed33d224434a4470_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b854d895480a6973ed33d224434a4470_JaffaCakes118
-
Size
10.1MB
-
MD5
b854d895480a6973ed33d224434a4470
-
SHA1
c68985660c5ac4616113573f063ffa3626633dec
-
SHA256
99aeec9e3c259bf07a83202c06c52cc74831fbb464ff256c2b5e4409398003b4
-
SHA512
5bcc8241a056e1261b4ebc1d2139c53908e54f9a771d1ad45c14e254b4a2ad271a5cfbff120bbe57ce74c405776432822edca4ada81741e2ec71ab4de1a90017
-
SSDEEP
24576:LlI2a3onvlHpCF9+Sh/2rhVwTU/KwcaIQc/tpBtv03xaq6GJ9NJ9QJ9WJ9OJ9xJ6:L4yNHgFDg1VkJ/tPikG9AGehm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b854d895480a6973ed33d224434a4470_JaffaCakes118
Files
-
b854d895480a6973ed33d224434a4470_JaffaCakes118.exe .js windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 948KB - Virtual size: 948KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9.2MB - Virtual size: 9.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE