Static task
static1
Behavioral task
behavioral1
Sample
f993d32417c66fce90f5eb6778a6c992_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f993d32417c66fce90f5eb6778a6c992_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f993d32417c66fce90f5eb6778a6c992_JaffaCakes118
-
Size
123KB
-
MD5
f993d32417c66fce90f5eb6778a6c992
-
SHA1
f75523aeb74282b0120452620394b54d518c270d
-
SHA256
eea61a9af1d74e16947f2fe92d2f0ad22c7f8670d9a05e58d3b4e7f061906501
-
SHA512
e20c3a6a7d3beb3c2bce86a5b6848a9deb6b1d52baf2ae88151d4a2ee4b2a29355511e46316a6091ec284a44577b7cecc8ff793ebb9e7ca78cfcf0c1fe85df9b
-
SSDEEP
3072:scYFbXF4Zw2qqC3qqqqqwPQbjEkXbXpsAoBRt1Xoo59xznX514/zO8Z/4mRCTJKR:scYFmZw2qqC3qqqqqwPaR5X61Xh1751e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f993d32417c66fce90f5eb6778a6c992_JaffaCakes118
Files
-
f993d32417c66fce90f5eb6778a6c992_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
WCALab Size: 64B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE