Static task
static1
Behavioral task
behavioral1
Sample
0b2596c17487b5f42152d71018067461_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0b2596c17487b5f42152d71018067461_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0b2596c17487b5f42152d71018067461_JaffaCakes118
-
Size
1.7MB
-
MD5
0b2596c17487b5f42152d71018067461
-
SHA1
685a314626eee95aa83d4ce9908e8bdca9ac6728
-
SHA256
d115157adfecfe1897c8854ace642dcb9eab961b59580627c4a1bfa1059a5fe5
-
SHA512
040b5ac309290b06541bc05270bf21c3a501204094a009e3ad9ee973c8f514e5dfd3bb14edbe624947a772aec32b9c5fd8272f8b3da3434c39fc9f1ed5712e37
-
SSDEEP
24576:Sden1I02kH/AcAeEEpHCh1Pzm3r/XG1jkseY5EQEMeqrwdj9Tiu0:mlkocajh1BeCE4od5Tiu0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b2596c17487b5f42152d71018067461_JaffaCakes118
Files
-
0b2596c17487b5f42152d71018067461_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
test Size: 988KB - Virtual size: 988KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data Size: 628KB - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE