Static task
static1
Behavioral task
behavioral1
Sample
11d90e2262cebfae56c44174cbc99a17_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
11d90e2262cebfae56c44174cbc99a17_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
11d90e2262cebfae56c44174cbc99a17_JaffaCakes118
-
Size
68KB
-
MD5
11d90e2262cebfae56c44174cbc99a17
-
SHA1
3b3dd640e907e5d4e795c93e58bd7ecbf8e1bbb9
-
SHA256
792660ab0c63e87c5bb2c4dd35cf3adf9ddf1bd132a28e629439eeb80d110836
-
SHA512
c091372303d055ba6df75e7649521b9613ec3a97828f6f0952565d43f4613c3948671c2d94bbd704ebc9e45a316bd868b9d14f4f3eb21c0487f3bf4f5f14a9d2
-
SSDEEP
1536:nCKozfpLaAQ/Rcd38XB0J3F3JX1bNTNrxnx3lHq4hppiYSQ99E+EsxLw:CKO4AQ/Rcd38XB0J3F3JX1bNTNrxnx3w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11d90e2262cebfae56c44174cbc99a17_JaffaCakes118
Files
-
11d90e2262cebfae56c44174cbc99a17_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 512B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hvqttwk Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
srpdacu Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE