Static task
static1
Behavioral task
behavioral1
Sample
1039ff7732d7cd8e83eb815d3f416e99_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1039ff7732d7cd8e83eb815d3f416e99_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1039ff7732d7cd8e83eb815d3f416e99_JaffaCakes118
-
Size
114KB
-
MD5
1039ff7732d7cd8e83eb815d3f416e99
-
SHA1
6054909595ec1641aaaebee29c03f6106c9af199
-
SHA256
c15a32aaa2faee042ad67db84a9e70472399114def563fa8767b45fb52ed52b2
-
SHA512
4ba9d90434937d22404a56ac6d59915145bc5fd3227e4d80a92e285070752572904f9c80da221cde59e4768353b31c7692e9d043b682030f306f1ef39b455cf6
-
SSDEEP
3072:QEwuFhPFzK55Q7UosTyw1Q6DlTJ6v+TizVL+cS34LmapxVdEcFDBgwA:jh+m7zYGzVIByD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1039ff7732d7cd8e83eb815d3f416e99_JaffaCakes118
Files
-
1039ff7732d7cd8e83eb815d3f416e99_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 12B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ