Static task
static1
Behavioral task
behavioral1
Sample
cf5891411a9a4a35646eb054c666f73e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf5891411a9a4a35646eb054c666f73e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cf5891411a9a4a35646eb054c666f73e_JaffaCakes118
-
Size
4.1MB
-
MD5
cf5891411a9a4a35646eb054c666f73e
-
SHA1
80c67f6a51c36851ae22277437f71fb3a8d10add
-
SHA256
5c060f956d3f3759d738ce6155efe23e1d2a8745bd2201c5f713f5750c98cee6
-
SHA512
e92b8bdc6d3f0ffb4d5e706a497eefbc18398bb5a2340ba6747ab0b259072de978d9f1f54434d5bb1782a5e4a5634dd723252d67e85ff2ae9f74b326373edb3e
-
SSDEEP
3072:a7hbt4fBB9IzXsG2v4i5MOPw72kuwkuWTlyfHfLd8cWZ/lBnywB:7BgI1MOw2jwWTly/q39y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf5891411a9a4a35646eb054c666f73e_JaffaCakes118
Files
-
cf5891411a9a4a35646eb054c666f73e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rel Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.init Size: 182B - Virtual size: 182B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 536B - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ