Static task
static1
Behavioral task
behavioral1
Sample
d630f46d06bf2c26ae0c91b559a90985_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d630f46d06bf2c26ae0c91b559a90985_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d630f46d06bf2c26ae0c91b559a90985_JaffaCakes118
-
Size
326KB
-
MD5
d630f46d06bf2c26ae0c91b559a90985
-
SHA1
d317687a1cf780e140eb75f9ed17632b84ece1ca
-
SHA256
a3d2683d1f306945ae03e03afdfef77b4036861baf21f1e84252402cebf67183
-
SHA512
391d9b6f37df5ce74eff4bd6e2e04fa99651a223c88fabfbcb4c3d57eea2c30a353aa1e5c2a63c600be0584461a846e132c630da6d08a4cdb896191a8dc6711e
-
SSDEEP
6144:AViyUkPRYhgIfyYUT86cr91aEmWcqm0DvaFl++01nwHuYc7Or5eg:w/5XabKUbPDiFl++01nOc6r0g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d630f46d06bf2c26ae0c91b559a90985_JaffaCakes118
Files
-
d630f46d06bf2c26ae0c91b559a90985_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ