Static task
static1
Behavioral task
behavioral1
Sample
119bb2266d0ab706a887d6bbb4c86550_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
119bb2266d0ab706a887d6bbb4c86550_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
119bb2266d0ab706a887d6bbb4c86550_JaffaCakes118
-
Size
142KB
-
MD5
119bb2266d0ab706a887d6bbb4c86550
-
SHA1
e51bdbad5e263f90acedb8ebe70a02acebc05d97
-
SHA256
cc8865ff1997f9ad358a321d1ab4a4d886ca13d3ffb875fd98ba83f8b49a6295
-
SHA512
2a70ad7c98392b3fef19eee8fa4e88adaffbb650c138e740636def85f41cdc8305bb7ea2635d3f5a91d285fc9b5ab96ab38de62b44c72e99e9ddc7af64da13ae
-
SSDEEP
3072:3+KwOXR4G5HPDgzt57sDfupyN9HItTXef7+yxRXAs0gCzNxC:3bwORp57K/ajT+yLX0giNxC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 119bb2266d0ab706a887d6bbb4c86550_JaffaCakes118
Files
-
119bb2266d0ab706a887d6bbb4c86550_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.s906 Size: 1024B - Virtual size: 840B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.s801 Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.s701 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 485KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.s405 Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.s100 Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.s730 Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ