Static task
static1
Behavioral task
behavioral1
Sample
f0261fc9bcfb837f60cb1ec427500d9a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f0261fc9bcfb837f60cb1ec427500d9a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f0261fc9bcfb837f60cb1ec427500d9a_JaffaCakes118
-
Size
940KB
-
MD5
f0261fc9bcfb837f60cb1ec427500d9a
-
SHA1
ab710c8c019a521b1f14c4c442c59138d555837a
-
SHA256
4090e9d98f1f5eb8c462b7c2c8f7e5a6c16ea15e3121ab7bb365883171b6ae4f
-
SHA512
7dcab20b2b799cbc0be6d4059b731345cb678b6b8de387000565a16fefc0ef4f3d2d5c85c5291e8239d318192ba92686c2d94ab1fc053533e2d043887b6bdc9f
-
SSDEEP
24576:BDo+h8eNd4fV+PhichFUWNZdTH74MR2am3:BDo+h8eD4micU4fTH7TZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0261fc9bcfb837f60cb1ec427500d9a_JaffaCakes118
Files
-
f0261fc9bcfb837f60cb1ec427500d9a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 161KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 43KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 15KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 146KB - Virtual size: 1008KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 561KB - Virtual size: 564KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE