D:\Form\Encoding\Decode Data.yth
Static task
static1
Behavioral task
behavioral1
Sample
40222cd27a03cb659ae4ca6759a03c65_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
40222cd27a03cb659ae4ca6759a03c65_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
40222cd27a03cb659ae4ca6759a03c65_JaffaCakes118
-
Size
230KB
-
MD5
40222cd27a03cb659ae4ca6759a03c65
-
SHA1
9b2ce17bdbaa53bcf8026d0410df644143d7e5cf
-
SHA256
d585f3543ba55196405fd1f0ae2db3c613b307c3bf27e5eb4a4ddeb5c113e7a9
-
SHA512
819375172d5291d73858daf58ebaa652af04f4dc44daeef608280ce4b45f4c114b276a1f882fc8fc6fb2d2acbbb9f53a616f33c18504a440e6bc693a2b2a829c
-
SSDEEP
6144:5VISe5LldY27+lAlRoaA/NMOifMX65D9VGU3L2a+:zeTqTlOREFJifW6pGsL2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40222cd27a03cb659ae4ca6759a03c65_JaffaCakes118
Files
-
40222cd27a03cb659ae4ca6759a03c65_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.NFX Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xRbng Size: 512B - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vtdnYY Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.WrEjh Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rvcGbk Size: 512B - Virtual size: 204B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PrYt Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.csyqE Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.APofZ Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xRb Size: 512B - Virtual size: 461B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.liTd Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qhma Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.awxhs Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.NlvVpa Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ