Static task
static1
Behavioral task
behavioral1
Sample
db7e86906d2d305aa2a0d7a6dded4267_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db7e86906d2d305aa2a0d7a6dded4267_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
db7e86906d2d305aa2a0d7a6dded4267_JaffaCakes118
-
Size
502KB
-
MD5
db7e86906d2d305aa2a0d7a6dded4267
-
SHA1
56b859e1d58d30b87eb0535341bff9d5b5957819
-
SHA256
423977f6bdba3c5c95fecca92e765c6e0da2aed99c1192b6a5ebc6fb7e81a185
-
SHA512
d5104e340f7c71bea2acbf1b6ac35669ee578f0defc8c3c832c11a3954885aa43311ba8ec65284f9cfc2e678fc4b6f14a9066e0fc1b16e331bfbb470644bf259
-
SSDEEP
12288:urwWFKb3Po9cyQziL1y7ILeeKzDyyIZSJq8MGxgIkT:urwKa3Po9cySiLgPM8/YT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db7e86906d2d305aa2a0d7a6dded4267_JaffaCakes118
Files
-
db7e86906d2d305aa2a0d7a6dded4267_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.syin$t Size: 792B - Virtual size: 632KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.h1i3fr Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vuixdn Size: - Virtual size: 5KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taq2rn Size: - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ng508n Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.794vqp Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gqv55p Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.8ae0uv Size: - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gczwc0 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 497KB - Virtual size: 500KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 64B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE