Static task
static1
Behavioral task
behavioral1
Sample
391b1fc8d28d3f8539c96592760e0f7c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
391b1fc8d28d3f8539c96592760e0f7c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
391b1fc8d28d3f8539c96592760e0f7c_JaffaCakes118
-
Size
720KB
-
MD5
391b1fc8d28d3f8539c96592760e0f7c
-
SHA1
670420a9ed5bbf3d99a4c1265ec8e74397ae969b
-
SHA256
522200c12c4a5a5a7cf6c3518c9301a279f88e3676b96c67569a368e1090623e
-
SHA512
c5d79db399f034baed6fe9102e018699baeb0ba22e6376add3cad7ae7fc4ffcc6a63db9667ee0a4ee4283feb3691a0b4dc7413dc46edf93f5fc854cafc92bc34
-
SSDEEP
12288:JRktSklU4g/n/t0EW5A0zyHvJwQ5oAlK+Ge+v8RIk6kQQ52LVRgM8/5sZ6qA8:j+lU4gf2EW5A2qJr/ko+vWIk6JyHk
Malware Config
Signatures
Files
-
391b1fc8d28d3f8539c96592760e0f7c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Code Sign
db:57:cd:d5:e3:3b:65:43:f2:cc:fe:3c:8b:58:9d:29:cb:d1:d4:e3Signer
Actual PE Digestdb:57:cd:d5:e3:3b:65:43:f2:cc:fe:3c:8b:58:9d:29:cb:d1:d4:e3Digest Algorithmsha1PE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 644KB - Virtual size: 648KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 38B - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mackt Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE