Static task
static1
Behavioral task
behavioral1
Sample
de9e311e3228a45a257d4f2aaafe70aa_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
de9e311e3228a45a257d4f2aaafe70aa_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
de9e311e3228a45a257d4f2aaafe70aa_JaffaCakes118
-
Size
348KB
-
MD5
de9e311e3228a45a257d4f2aaafe70aa
-
SHA1
3cc39789ae7b61073e9b89666c5f1c4981b317bf
-
SHA256
29c2b46763ad5aaeb124029ca571f01930d61c5d6b98f3a0b7eb29526c7b39ed
-
SHA512
7ea5d45441de773508f13f8886c522f42347ed8bcde660f72e4d72ce3c75919e860c7a2be9a61e1802f862a3647ce37fd0373c07254f85e84420bb83f1d0e9dc
-
SSDEEP
6144:p3+8mdUc25rKFW4Tn7ytU730rX9xwoUCbNSMmwTnGNgW0oYquZyGxAHKeHSZcMRX:p3+ndU35rKFW43MmwTnGAfo2JB9QE1jI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de9e311e3228a45a257d4f2aaafe70aa_JaffaCakes118
Files
-
de9e311e3228a45a257d4f2aaafe70aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 244KB - Virtual size: 241KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sdata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE