Static task
static1
Behavioral task
behavioral1
Sample
301c90fdf79bc50f3dd241ffeb687292_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
301c90fdf79bc50f3dd241ffeb687292_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
301c90fdf79bc50f3dd241ffeb687292_JaffaCakes118
-
Size
366KB
-
MD5
301c90fdf79bc50f3dd241ffeb687292
-
SHA1
431e57e811e0fb18a5c1c5bf6511fde5a786f354
-
SHA256
ba29501201e438eeb8023cfea4add8cec6b7250af896e15b5ca1f28f4c33e3a9
-
SHA512
f48e4f36f638ac63b870ce0ec91fbc1e4bcba758b027e44e64dea06c4508fba4b8f954ee7cd3e80be3e320b0122923955e389da4021c8fab34a6c4cb96f3a756
-
SSDEEP
6144:+ZpclA4kUrIPyMTDEwhdHe3BGdUZX1WIqgqwxVOSfGW6xfdYR8JY/wmxc1QvGmmG:+rclANyIjTgwb+AdUzBqoPfGbRi3/wCd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 301c90fdf79bc50f3dd241ffeb687292_JaffaCakes118
Files
-
301c90fdf79bc50f3dd241ffeb687292_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: - Virtual size: 644KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 7KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 35B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mdn Size: 363KB - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.109 Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbt2008 Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ