Static task
static1
Behavioral task
behavioral1
Sample
124d5aef77364e0b9af6b9098edc4d9e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
124d5aef77364e0b9af6b9098edc4d9e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
124d5aef77364e0b9af6b9098edc4d9e_JaffaCakes118
-
Size
104KB
-
MD5
124d5aef77364e0b9af6b9098edc4d9e
-
SHA1
d3e77cab5996b1a2bc59a23cbcf9bf4a367e048b
-
SHA256
09bcd330d308aa99cf7493dc90d214c9b755acba22aa7b26c3d7ea2df04c94fa
-
SHA512
5650469ebbafdddc011fde883f44a712deaf7bf06c8be52ef53e47b40ee226fbbf7b9cabdf7e6452dae8a68f874618a1ece3e65fdbea969376bd107eaacb46a9
-
SSDEEP
3072:FHBY6YftArr3qptOYNP2Sc/Xi0WuI4LnvNM/V3Ngeb4W:FGXM7QrOdFW38e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 124d5aef77364e0b9af6b9098edc4d9e_JaffaCakes118
Files
-
124d5aef77364e0b9af6b9098edc4d9e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 12B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ