Static task
static1
Behavioral task
behavioral1
Sample
c1d1507b961a0d12a9cd6587f9206ac8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c1d1507b961a0d12a9cd6587f9206ac8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c1d1507b961a0d12a9cd6587f9206ac8_JaffaCakes118
-
Size
27KB
-
MD5
c1d1507b961a0d12a9cd6587f9206ac8
-
SHA1
d9cbc9dd87124f2fe1243b1a5eeb7ad91d18f9c9
-
SHA256
ccbdc566b04821e01f8d9870ffce94c516c3ff3d6349fb06b73a400b8551dcc4
-
SHA512
62a6d91f24af69033081c9f53ba731e9e542aa380e3361aca71adc1c42097e6b685d8ea43b5bfd2321c5b557fb6a3b077cb65ab31301573b1f4e1ddfacc1d6ae
-
SSDEEP
384:b7iMxz0CYEmqd+1F8TQ2YlSyK5d8u2D3Jx5bZMMGZpnp1vhQjt+mXBaaHj8sJc4W:b0CYjqdS2TQDuulr5+VP+T8aosJo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1d1507b961a0d12a9cd6587f9206ac8_JaffaCakes118
Files
-
c1d1507b961a0d12a9cd6587f9206ac8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ