Static task
static1
Behavioral task
behavioral1
Sample
da1f1959ca09e2cedc7f645b25f05716_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
da1f1959ca09e2cedc7f645b25f05716_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
da1f1959ca09e2cedc7f645b25f05716_JaffaCakes118
-
Size
25KB
-
MD5
da1f1959ca09e2cedc7f645b25f05716
-
SHA1
9213caae42e9c72a5de87ac1a8b47feb54df903a
-
SHA256
16b6b1885ba620cd74d2cd340702a6d959b43119db7ec9572cef1a358a52b236
-
SHA512
8ed8091a183e4295cadebb304d0494177c347079e848fc85ac291487c75638a199a4e4782cbef93d1c63945941620811719c9c039824127ebb0342599d4d0e36
-
SSDEEP
384:BZpmxzlNlw5lS04444mHZvQqdOJJys6ccWpH7AS:dCzlGlr4444svrD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da1f1959ca09e2cedc7f645b25f05716_JaffaCakes118
Files
-
da1f1959ca09e2cedc7f645b25f05716_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 520B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 6KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 732B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ