Static task
static1
Behavioral task
behavioral1
Sample
289802074f710687a9ea65e6a7ed4ec5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
289802074f710687a9ea65e6a7ed4ec5_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
289802074f710687a9ea65e6a7ed4ec5_JaffaCakes118
-
Size
93KB
-
MD5
289802074f710687a9ea65e6a7ed4ec5
-
SHA1
64a59ec47e2ffb5c4f4ec08a66aa88bed2d29486
-
SHA256
ac1443aa3ac22262aa3a424f61933082d070788e22cd3c505f77287b78db557a
-
SHA512
29af2ec5027ad9b43fd84e1204856276f1695349126c2adf1419f57ab6141355d20ac400bc54695248370f9842f13a02f91dbef6ecea13e54deda0c47ec876f6
-
SSDEEP
1536:uyqufY0GQIrjZtk8Fc04CquFw0GQK7QXW0jODNuq78co3Z4FB0t8Dn6kuq:6NrNnc0Sv7QG0SDyXt8D6kB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 289802074f710687a9ea65e6a7ed4ec5_JaffaCakes118
Files
-
289802074f710687a9ea65e6a7ed4ec5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 219B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 19B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ