Static task
static1
Behavioral task
behavioral1
Sample
0286058970f6d803be4c54288eda4ab1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0286058970f6d803be4c54288eda4ab1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0286058970f6d803be4c54288eda4ab1_JaffaCakes118
-
Size
41KB
-
MD5
0286058970f6d803be4c54288eda4ab1
-
SHA1
5e7023da3426083dce6c7642b028fd2bb36ab43e
-
SHA256
d16c5dc4da6bac91e858d8610d60975c46dc34915ccda7129dac8967e0ce5ced
-
SHA512
4cd6b06e7d7fd06c9985cad6278d696395072682a358e8e14ee4c40dde7358d2656b436abd66a03721461291f3c69b854b8255ee886488629b31d9db9a36bb75
-
SSDEEP
768:QCvqyQj/mOcwnRWwbggt5zB6UUWdG92W049c1Vb5nBOHhTemRi4YkrqteFx87LH6:3vqyQj/mAW+r/lZt1Vb70emkdEFx87La
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0286058970f6d803be4c54288eda4ab1_JaffaCakes118
Files
-
0286058970f6d803be4c54288eda4ab1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ