Static task
static1
Behavioral task
behavioral1
Sample
f08e24551dc4658b04c5ab683196e9bb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f08e24551dc4658b04c5ab683196e9bb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f08e24551dc4658b04c5ab683196e9bb_JaffaCakes118
-
Size
3.0MB
-
MD5
f08e24551dc4658b04c5ab683196e9bb
-
SHA1
6601032d284e46c0c374169ac5cd4fd9a2294b1f
-
SHA256
d6e8e5280681569119750f722e4c5949d6ca4736359686f9c867649d2e5ba576
-
SHA512
1b5f217e1a0c6e17884c21702e01350c07674e6290f08e8ebe1a521b10802d43dc4a838f1ebb80372f160ad2d2c39d5506dbe1e2a7ff46c930c8fc73de4dde5a
-
SSDEEP
98304:KH/N4cleoNrJ6x69CVcPaE2Ho7qj8LzX1:a/N4clXJYwC2PaE6Oqj8t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f08e24551dc4658b04c5ab683196e9bb_JaffaCakes118
Files
-
f08e24551dc4658b04c5ab683196e9bb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ