Static task
static1
Behavioral task
behavioral1
Sample
decba52553e917e517e5856c9efeff17_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
decba52553e917e517e5856c9efeff17_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
decba52553e917e517e5856c9efeff17_JaffaCakes118
-
Size
349KB
-
MD5
decba52553e917e517e5856c9efeff17
-
SHA1
e01aed751a115782a4a84b3196dd62638d806729
-
SHA256
926bb9b7ae378fadc8872ce029d771315fadcb0686a78b97f5628d19df04e782
-
SHA512
b88537866a0dbe024d52952e1b24ab713b798ca3e57bff9d1449ed9cdf3ff5517c18620838065a42a07406fab5c59011399345b5f23ab8e4e3a468a6fd82a747
-
SSDEEP
6144:jpsJMT9ADC0RxumX7ns/DcHfHSHSFQtj9G5Rckf098RIUFyznb02cqnc6htZ:jps+T9kC+Qs7s6gNFORckcMIWqbCa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource decba52553e917e517e5856c9efeff17_JaffaCakes118
Files
-
decba52553e917e517e5856c9efeff17_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1KB - Virtual size: 652KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MaskPE Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.shoooo Size: 346KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pe�� Size: 22B - Virtual size: 22B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ