Static task
static1
Behavioral task
behavioral1
Sample
080d6812044488ac01ed282d33030164_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
080d6812044488ac01ed282d33030164_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
080d6812044488ac01ed282d33030164_JaffaCakes118
-
Size
8.4MB
-
MD5
080d6812044488ac01ed282d33030164
-
SHA1
1ab7e5bfaaafeb3d1d8f99bd10757c0c3a0706a9
-
SHA256
5746052ab78fe1b6f94d3feea850b2d939bf7d3f79726588f03f0fcc8bd0f473
-
SHA512
1465c2d3f8e9181b49652c2e0e02b609fa2a1f52362ea7b71301894bf5c3e7e4c069fc3a57e13486b09e55169dd67da1a190cd2d181852162667427770f65ea6
-
SSDEEP
24576:tEtl9mRda1rMMpXS0hZFhNGpWXKB8NIawF:mEs14wi0fFhNGpW6B8NIawF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 080d6812044488ac01ed282d33030164_JaffaCakes118
Files
-
080d6812044488ac01ed282d33030164_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 368KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zqi Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ick Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yxutw Size: 512B - Virtual size: 4KB
.f Size: 512B - Virtual size: 4KB
.fmbav Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ygz Size: 512B - Virtual size: 4KB