Static task
static1
Behavioral task
behavioral1
Sample
158f7ebadd8b0f7abc2a7e32ab07c8ec_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
158f7ebadd8b0f7abc2a7e32ab07c8ec_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
158f7ebadd8b0f7abc2a7e32ab07c8ec_JaffaCakes118
-
Size
927KB
-
MD5
158f7ebadd8b0f7abc2a7e32ab07c8ec
-
SHA1
c49898de995c6f9e67b5119b882e502874d73b8b
-
SHA256
451cd3feb906def6b82ee1eb0642020925ca78cd872656eba872a6c5a2a21e04
-
SHA512
4785cf22257212d6bfcf7a4b417ebd5548ce921da67c8791d45be3dcc1830a32da96b47885ff671896d470e7e65edb0c9faa46774788afdf7b07fa555abaaab9
-
SSDEEP
24576:RYSR67H8X7r7nqhcs4+SeJia0bpYOqx5p:6y67cPD84+Sez0uvx5p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 158f7ebadd8b0f7abc2a7e32ab07c8ec_JaffaCakes118
Files
-
158f7ebadd8b0f7abc2a7e32ab07c8ec_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 542KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 177KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 201KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE