Static task
static1
Behavioral task
behavioral1
Sample
165a644037cc84d978ee25eaf3b6b93b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
165a644037cc84d978ee25eaf3b6b93b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
165a644037cc84d978ee25eaf3b6b93b_JaffaCakes118
-
Size
123KB
-
MD5
165a644037cc84d978ee25eaf3b6b93b
-
SHA1
fd0bb90262c37c21abfebc91b14b1b73dc6849f9
-
SHA256
1a41393fea983bf27ce9446b047e26a30f60303dae782f6971b6694d893e759d
-
SHA512
5ee68150bc7364d6927dfa3841f46c592ac681402da413933c2f97f1d44c701cb549d681019c9dc476e034a38bdd44831b46f546447d2e2c790e3a2b0213e97d
-
SSDEEP
1536:Ncw5d7clttaDYfh3MTwwFn+lcYKqKec8XcPoALA6ic/PblzMSpYCbhuro5LPKh+I:6Q7ciYfBMTr+lue7XObtDYCbxpE+iUHE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 165a644037cc84d978ee25eaf3b6b93b_JaffaCakes118
Files
-
165a644037cc84d978ee25eaf3b6b93b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1KB - Virtual size: 258KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MaskPE Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.shoooo Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pep Size: 20B - Virtual size: 20B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ