Static task
static1
Behavioral task
behavioral1
Sample
256ceb20d653f77ca9207051c5507644_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
256ceb20d653f77ca9207051c5507644_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
256ceb20d653f77ca9207051c5507644_JaffaCakes118
-
Size
96KB
-
MD5
256ceb20d653f77ca9207051c5507644
-
SHA1
c68a0c6a2ee4203946a7cd56cf33e5e624782967
-
SHA256
61a9e07ebeae42d165efca0f4b1f759f54b1bded027a50f23fea61057911aad2
-
SHA512
0cd0a02ac119f11a709c265b30e76f7e4ad8debdeb5a1e608b740364bcf80997b3263c2cf9cabe8b548d28e3e9fb7420f316fc9fe0c9b5e53d8241466d1d5662
-
SSDEEP
768:bTmpM8V/MbDCNqTXT30MJIt/vqWU9rS0z1EPjONOshHf:bTajuTwm9rSI1GshHf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 256ceb20d653f77ca9207051c5507644_JaffaCakes118
Files
-
256ceb20d653f77ca9207051c5507644_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 352B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 12KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 8B - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 16B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INFO Size: 12KB - Virtual size: 12KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE