Static task
static1
Behavioral task
behavioral1
Sample
d4f0cfdd6d09db4904eae5821184c5a3_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d4f0cfdd6d09db4904eae5821184c5a3_JaffaCakes118
-
Size
1.2MB
-
MD5
d4f0cfdd6d09db4904eae5821184c5a3
-
SHA1
27e4809386072a6dfac8f9b527bf51b0c2f2ba0b
-
SHA256
fb4ec43cfdba399fdef0205216b1625b5dd4ed06aca71d5815531a65e901c6bd
-
SHA512
a2b3b8c651d09b76da425a4e13bcee7225879f1a58acf301ed093a31bb014eafc09efd84f03103ffd2d736c3acdba3c24eed69e3b3481990783321c5ae510a05
-
SSDEEP
24576:XIEQzXoLLq3RM+vA9jZhbXe03dtHmTGWUT7b7IsfmHCU4i:XV4J++vYlhbu03dRmlUvnBfmHCU4i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4f0cfdd6d09db4904eae5821184c5a3_JaffaCakes118
Files
-
d4f0cfdd6d09db4904eae5821184c5a3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 307KB - Virtual size: 307KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 869KB - Virtual size: 872KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE