Static task
static1
Behavioral task
behavioral1
Sample
5582af1db09091e9b39b502fa4b6851d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5582af1db09091e9b39b502fa4b6851d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
5582af1db09091e9b39b502fa4b6851d_JaffaCakes118
-
Size
1.9MB
-
MD5
5582af1db09091e9b39b502fa4b6851d
-
SHA1
9d5008953cff5754c799c54fc57657e2dff31d16
-
SHA256
a14d466f9aaa63c0e8589bc958c1370311930a7c3cc570b6933142416d5cf61e
-
SHA512
e7fae0f62923664564df029f8f01e92bb3ccac2d0cc249b512a8c9a130a8dfdecc493129449b65396c3f183b58b0a78bb184f1ae0b6675bbfe7f5618c306d545
-
SSDEEP
24576:5Nks79LQW/AHLY5abJF8Xnovx9+IBxtiTJ0h28QeInekd7c79juPdEKaJ:Dtqk5KmkxRftiTJr8QeiJdkjo1aJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5582af1db09091e9b39b502fa4b6851d_JaffaCakes118
Files
-
5582af1db09091e9b39b502fa4b6851d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 33KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 677KB - Virtual size: 676KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ