Static task
static1
Behavioral task
behavioral1
Sample
d4b769a5082c2da9f8d5d057a24723e4_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d4b769a5082c2da9f8d5d057a24723e4_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
d4b769a5082c2da9f8d5d057a24723e4_JaffaCakes118
-
Size
192KB
-
MD5
d4b769a5082c2da9f8d5d057a24723e4
-
SHA1
ee332c0699388554f56e6324cb85ba66b0e1b27a
-
SHA256
5315fbb68ac73b4e26fda2dd1c43e0d3998bd8b80ae843dfb58a7e94cf16dcf2
-
SHA512
a4bfb0b5b814a16b80a501c850e977728f1ef77109d709728a8507e5ca80395b272b31206d9ab7e0081def28347dea6c67edd7a79409d6684c8f4384169bee0b
-
SSDEEP
3072:Jrefot5aBcnUkQEX3uNTaO8b6NPLrwFkt2WmxoKW1P6lVvMc:Jr2ocOjQOuJaO8t0ND6lVvM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4b769a5082c2da9f8d5d057a24723e4_JaffaCakes118
Files
-
d4b769a5082c2da9f8d5d057a24723e4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 14.7MB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ