Static task
static1
Behavioral task
behavioral1
Sample
0588ab0ef7b2d21338df2235d413b067_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0588ab0ef7b2d21338df2235d413b067_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0588ab0ef7b2d21338df2235d413b067_JaffaCakes118
-
Size
166KB
-
MD5
0588ab0ef7b2d21338df2235d413b067
-
SHA1
3978990f89e200d36f1b4b2fe5d5c44faa44f85c
-
SHA256
e8533d29494549a0d58995cf260cd12383ab28069d128d0b1601f1fcbec534dd
-
SHA512
f864529696f4909985b68bcedc05a0908a0b7a0d9a1e333c397e075046f924b11458d77196dc9dbd63c98dfa26161e4e22f7482c6c20cb80507f338f6b7e41fd
-
SSDEEP
384:ojttOljx1KR527+LSFAiJvOaKTXIbtyF/GOHvv0LvGu+AxRr6+I9PfYUDw6:V1M5LcX1nbtyFJHH0LvGuJx8LoIz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0588ab0ef7b2d21338df2235d413b067_JaffaCakes118
Files
-
0588ab0ef7b2d21338df2235d413b067_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 14KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE