Static task
static1
Behavioral task
behavioral1
Sample
f081e0bd8b5652bd653244ef9f3d78ec_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f081e0bd8b5652bd653244ef9f3d78ec_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f081e0bd8b5652bd653244ef9f3d78ec_JaffaCakes118
-
Size
41KB
-
MD5
f081e0bd8b5652bd653244ef9f3d78ec
-
SHA1
d832351ed9f09158f28ea91637342b74d56c53f8
-
SHA256
a4274b9296c484058d45b72db2482a9980cea485be9bdc8f9ca8a5962131e734
-
SHA512
111b525a5ab54ce29d2d3b83df01d08b75992bea0af74b4377871b8f98e9508d68e060154e12248a819932262cf7fc0e92a60acd02db4dfc8295b62e7b1f2ef9
-
SSDEEP
768:bbivfLELXGUERaW9AAWncHxnXk8Kd05o1arBttey6bLtzb8x:bbivDcEgaAAWcBXkZdzwWy6bLtzIx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f081e0bd8b5652bd653244ef9f3d78ec_JaffaCakes118
Files
-
f081e0bd8b5652bd653244ef9f3d78ec_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ