Static task
static1
Behavioral task
behavioral1
Sample
b9de7c69827334066e9e584cec428ab2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b9de7c69827334066e9e584cec428ab2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b9de7c69827334066e9e584cec428ab2_JaffaCakes118
-
Size
1.0MB
-
MD5
b9de7c69827334066e9e584cec428ab2
-
SHA1
ec04edb3a6c92372f2c1e87b836c57df487ab86f
-
SHA256
2c5263e259deb6ad855b9f6a48b003ea650a17281a8d9e84e690c66c0e6f591c
-
SHA512
d512dded074addf7c507308ad17abc31db9ddb962930104d0d2be365dc0ff183b9578d9f63121ddef80c1b11e275d9a28efbb887e0fa43a9b4b8d462955549be
-
SSDEEP
24576:9mxtEKROnewbhHyTVclIyDqO2MWdWQ5Uk3NGED3yXz:9m2nBI+lIAqZd1l3gEDCXz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9de7c69827334066e9e584cec428ab2_JaffaCakes118
Files
-
b9de7c69827334066e9e584cec428ab2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 597KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 97KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 70KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 292KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE