Static task
static1
Behavioral task
behavioral1
Sample
574a2c2edc46548fc60c8e51c397e64e_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
574a2c2edc46548fc60c8e51c397e64e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
574a2c2edc46548fc60c8e51c397e64e_JaffaCakes118
-
Size
6.1MB
-
MD5
574a2c2edc46548fc60c8e51c397e64e
-
SHA1
17c4bc1c87807e372f25a988df9b981953882ebd
-
SHA256
6da45893e72a51cdd7c20310fd809e3ca95be81e30bbdb9d388f9b7cec193fa2
-
SHA512
0c6451902020f478995d0c8cdbb4fdec24372f40d31710710f06206efda791aec9242cae46bab29b83def2fff9616ead5d289fbeb3414d999e49c7424d70fdad
-
SSDEEP
98304:mj+nsPkA0yYFtamFl2+XxbYquhegdb0ckmkck98nZmLK+18TU6OkhM2Eq8HVU9ds:HnLbmmv9luELjakmn4LK+cVOGDds
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 574a2c2edc46548fc60c8e51c397e64e_JaffaCakes118
Files
-
574a2c2edc46548fc60c8e51c397e64e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 3.4MB - Virtual size: 8.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 215KB - Virtual size: 988KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 149KB - Virtual size: 16.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 518KB - Virtual size: 5.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE