Static task
static1
Behavioral task
behavioral1
Sample
c135575c813e7c8c0fe7a33fa4969e0a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c135575c813e7c8c0fe7a33fa4969e0a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c135575c813e7c8c0fe7a33fa4969e0a_JaffaCakes118
-
Size
248KB
-
MD5
c135575c813e7c8c0fe7a33fa4969e0a
-
SHA1
b5fd1f61c8d8e59f2dc404e777f53caa1b1ed5dd
-
SHA256
6e2b060c0eb354d1dd35b8b72d85327cb2f0f893308d42ad08de1ab9a0ed8775
-
SHA512
c91a4a4d8e51e08895c20715e707443c5d4e4f1a3580485ef00c7b02976731398a9640339c18dd72ac9b50c90ef29d2079fed9b8e5a84d777730e866c96f9879
-
SSDEEP
6144:S3Ehu/RiacAivpmU050EVPcBGFL016RF7DZA:SGAVcbvpx05XFcBGg6R1FA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c135575c813e7c8c0fe7a33fa4969e0a_JaffaCakes118
Files
-
c135575c813e7c8c0fe7a33fa4969e0a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 27KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE