Static task
static1
Behavioral task
behavioral1
Sample
d59c9afc24847c5d24a3067331b02050_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d59c9afc24847c5d24a3067331b02050_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d59c9afc24847c5d24a3067331b02050_JaffaCakes118
-
Size
272KB
-
MD5
d59c9afc24847c5d24a3067331b02050
-
SHA1
0d94f6aeee2ad751e27ef9ad8cf2733c04ba6779
-
SHA256
6b47895f9f6f39ba1e8a5b1ce38dbeb2896964670fa2adfe39648a42622e4b4f
-
SHA512
ec3ec749157f0e618d49513aacbf570ed2bd2ddadea4f3435fdcac472183bbaa27a77ee26289c49cef088bb9d5b08bd55efe589ea5fb301a10626ca48735f5f3
-
SSDEEP
6144:5ppRIM5eHKYGtoZlgOX575lPUcjo/mgEvfchtBQAh7f:PprilJ75lP50mPvfcZfV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d59c9afc24847c5d24a3067331b02050_JaffaCakes118
Files
-
d59c9afc24847c5d24a3067331b02050_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
0 Size: 182KB - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 46KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE