Static task
static1
Behavioral task
behavioral1
Sample
be7f2c9f0123024c75ab7ee65c23a64a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
be7f2c9f0123024c75ab7ee65c23a64a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
be7f2c9f0123024c75ab7ee65c23a64a_JaffaCakes118
-
Size
595KB
-
MD5
be7f2c9f0123024c75ab7ee65c23a64a
-
SHA1
1f6bd76e1c6d9b01dfac83396df30f84d2ef4b1d
-
SHA256
d7958ed899f7e3df2d228b2b3aa8089b19cfda9a2810ce98a0564909309b44e8
-
SHA512
d9680ebaeb7d69646a241b55426e362c087f900e523b0ab5179c5fb97f311df8bb3414616fd28dcd343ac7dc1993a7390ad3a322269c0897172c2bf3155dac66
-
SSDEEP
12288:3wBSKxMg93xn1kX5PF1+2CYf4T4F3Z4mxxWUkL3o2I3QymK:34SKewx1kJP/+2CYo4QmXQ3o2Xk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be7f2c9f0123024c75ab7ee65c23a64a_JaffaCakes118
Files
-
be7f2c9f0123024c75ab7ee65c23a64a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 824KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 271KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE