Static task
static1
Behavioral task
behavioral1
Sample
14764f6e01eea7fc1fbcf20ad4b2fc73_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
14764f6e01eea7fc1fbcf20ad4b2fc73_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
14764f6e01eea7fc1fbcf20ad4b2fc73_JaffaCakes118
-
Size
438KB
-
MD5
14764f6e01eea7fc1fbcf20ad4b2fc73
-
SHA1
1d0aba769d9c114a9e1d2e60af15218e3ba68852
-
SHA256
bdc06a3c166b830c8ca9f21332effd30a1a94657d02fa7d307022ce3b12f98f7
-
SHA512
22d7fdb5934663b66190d1c7b80e019b00e0d36205aa09533560bf40cebf0d9edd3d7fda4648be8dcd661ba37d9cba40cc464d5276c59f1bc7e41f91c573e199
-
SSDEEP
6144:+5sEGsNwNamnGcS3nCLbHSxhycj/+fvpCFMz/7dVtl7x56hhHx8SKKhJ95zjS51V:0VcSIwVGfBCFMXzxmh7KK/cUr8P5aw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14764f6e01eea7fc1fbcf20ad4b2fc73_JaffaCakes118
Files
-
14764f6e01eea7fc1fbcf20ad4b2fc73_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ