Static task
static1
Behavioral task
behavioral1
Sample
08225797e2666b6140477f3bc8d9f2c9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
08225797e2666b6140477f3bc8d9f2c9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
08225797e2666b6140477f3bc8d9f2c9_JaffaCakes118
-
Size
115KB
-
MD5
08225797e2666b6140477f3bc8d9f2c9
-
SHA1
f1ee9351fcdcd138c1074de855977763a2fcb945
-
SHA256
7f7f55ac9c0267ff56d80c1c51fa53319b8846ce833bcf1dad56b050ef097b06
-
SHA512
f6fd04584e3e7620215586f7e7b5800cf42f8ec9c4c842654b3b14d543a71cb074299501d97a6195af6785d02877b24f417250a66ee2f4b5107c79b933f0d85e
-
SSDEEP
1536:jZswrWV8RKIuR+Y6HhumumZd7vTfxLEDyobn1M0duJCAQVQ0OJ+MxCKEFXvx:j2wWV8Y+7BfZpvT5LElbnpSEVqfxCX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08225797e2666b6140477f3bc8d9f2c9_JaffaCakes118
Files
-
08225797e2666b6140477f3bc8d9f2c9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 63KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE