Static task
static1
Behavioral task
behavioral1
Sample
f680676e632cb381ada3d49dd0694c39_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f680676e632cb381ada3d49dd0694c39_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
f680676e632cb381ada3d49dd0694c39_JaffaCakes118
-
Size
761KB
-
MD5
f680676e632cb381ada3d49dd0694c39
-
SHA1
c4c9bffdff2837e0280d591d506b2c161848b93c
-
SHA256
83bd75d0f56a3f4216e06cc54f313ee6a7ac5d2fea1eb45a0ad54d965fc4b54c
-
SHA512
56f67d8fd5a3ebfacdd56e9a463ae35f1b2ae60bb739b909c879d94c26fa46353a061fe4e4c311afd6e321f88587c9c6e05004bd37ca8f62fab39824be46efc5
-
SSDEEP
12288:LUs5+yfLVojdSDWpcGSE1/5p3dKIvPIxkTjpLKuJQFOE8edYjP/N9W2898m6KzIj:LUvyBoZvCI1L3rdKp8e4a28qm69X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f680676e632cb381ada3d49dd0694c39_JaffaCakes118
Files
-
f680676e632cb381ada3d49dd0694c39_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 196B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 982B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 731KB - Virtual size: 730KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ