Static task
static1
Behavioral task
behavioral1
Sample
d64c14f0618dc48c735f49359a4231e1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d64c14f0618dc48c735f49359a4231e1_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
d64c14f0618dc48c735f49359a4231e1_JaffaCakes118
-
Size
184KB
-
MD5
d64c14f0618dc48c735f49359a4231e1
-
SHA1
c25cc2a321c8f0f252b3a8a3a2747b46de3840e0
-
SHA256
05bdbce55b0bc4640c29da64f73697289219845fe6c7bf838fb831f695cf6e54
-
SHA512
7f138f5481e127a0550df129c4a1f81c02fb2f43073a314eb8f6d6859a95c87af3f6500a31d580319af7e2fbf22dfe4a64752a84caee4c9beeae03f068f972de
-
SSDEEP
3072:ji8toTo5VJAe10j2PdxyY8Fyy6rpOKuIvDBxCePapil+vyFA:jiWoQme1nPjyY8Gfq1il+vyF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d64c14f0618dc48c735f49359a4231e1_JaffaCakes118
Files
-
d64c14f0618dc48c735f49359a4231e1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ