D:\Form\Encoding\Decode Data.yth
Static task
static1
Behavioral task
behavioral1
Sample
400ce02718ec3f6b5354cea8ee5c7efa_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
400ce02718ec3f6b5354cea8ee5c7efa_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
400ce02718ec3f6b5354cea8ee5c7efa_JaffaCakes118
-
Size
231KB
-
MD5
400ce02718ec3f6b5354cea8ee5c7efa
-
SHA1
b2d31ffe8f8cf86edf7013d0a32d338d656d8539
-
SHA256
e14bde36a7d2dc19374b4c2dd4408493fc9eca3ba8f7bd45049e0942388e81f3
-
SHA512
9c586de66c7519d2bbde373cec844b54717ab69c95e62d16b6aeb96f4d439aa63c8d5cbb7bc23c9ea16cca120877e15482cd75f872082c477cb717fcbf6ea33f
-
SSDEEP
3072:mUJzZ/lg+cEiK5TB9RtVXivy/DmarBdsrNEpCOs6noo9wn3N5D4EVM3JJfvUrEoY:mmCsT7Rbbaar7s2Xnnw95D9VM3Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 400ce02718ec3f6b5354cea8ee5c7efa_JaffaCakes118
Files
-
400ce02718ec3f6b5354cea8ee5c7efa_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.NFX Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xRbng Size: 512B - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vtdnYY Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.WrEjh Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rvcGbk Size: 512B - Virtual size: 204B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PrYt Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.csyqE Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.APofZ Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xRb Size: 512B - Virtual size: 461B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.liTd Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qhma Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.awxhs Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.NlvVpa Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ