Static task
static1
Behavioral task
behavioral1
Sample
460657df2e6e00afd9dcc1a9b03b88f1_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
460657df2e6e00afd9dcc1a9b03b88f1_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
460657df2e6e00afd9dcc1a9b03b88f1_JaffaCakes118
-
Size
181KB
-
MD5
460657df2e6e00afd9dcc1a9b03b88f1
-
SHA1
5ab0b41b0ed9a8c697cb6e3d8874170d9acc7496
-
SHA256
b06160d90621ac4b4642b3a6286ece5d0397c206fdad56e265319f94027c5284
-
SHA512
b851b9d8ece42b9a3d664eafc7815f6d8661d0d05b6a5d93c7f7259fbe3016868fce0de96d9d3079067fa1cf926fc17da0a28e905fb8d29a88fd18bed4b557b7
-
SSDEEP
3072:JtXtpArxo9OPiYrbhDpk8rVJQzahicYSltQiGv4bGoIbHxsDMBh0yi0wfkDLY5k6:7nA+AiChDpkMVJkahXlK4yoiRsDMBh/p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 460657df2e6e00afd9dcc1a9b03b88f1_JaffaCakes118
Files
-
460657df2e6e00afd9dcc1a9b03b88f1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 169KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE