Static task
static1
Behavioral task
behavioral1
Sample
1355612f81b13f96ac2ae673401452b5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
1355612f81b13f96ac2ae673401452b5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1355612f81b13f96ac2ae673401452b5_JaffaCakes118
-
Size
927KB
-
MD5
1355612f81b13f96ac2ae673401452b5
-
SHA1
395d1a152d2ce1f7ceb9c5db38112bf4bd916d9b
-
SHA256
01b66cd4774d611eb5c23a65db2a63cb2a91a70745afeef13bbc1a1b952fef7e
-
SHA512
5a78be542e299c3c11c956de13e3df4dfadef6bed9e3ecf421c93abe3e9058821c7f73599ec5b8cc5826bedb0298bc0b2ed4a9503201c38709c7c8f0c5552a33
-
SSDEEP
24576:Y3QUEmntAYJRiRTFX53Ire2SXGgB/KrknL8C:YAUpnPATFXhB2CSQnX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1355612f81b13f96ac2ae673401452b5_JaffaCakes118
Files
-
1355612f81b13f96ac2ae673401452b5_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 218KB - Virtual size: 218KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 9KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ