Static task
static1
Behavioral task
behavioral1
Sample
001db232561be06cdaf1b5552394a98c_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
001db232561be06cdaf1b5552394a98c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
001db232561be06cdaf1b5552394a98c_JaffaCakes118
-
Size
2.3MB
-
MD5
001db232561be06cdaf1b5552394a98c
-
SHA1
b9b096e85c00adb12ec2f640f4797e6a05a984d1
-
SHA256
5db443e7acada838d23a9cc5f3fbceb487604fb6aa34d65494f50da0622ad711
-
SHA512
d2bc61bd70947a1f1b86543dbf2a43230b1ad678ea1db921b8de8fc16b7a8108c6d775d94d1f924016908f28dde28725292e4d05d5fda1bb3bf35855d15af794
-
SSDEEP
24576:rl57oYy4mZ8iYvxTrXmBcAmycpogEvZL0Y221/yGOyiO5D273LzWno3Tu67kU7t4:VypKAayc2vZL0tjyRKRDujUpTYk3t0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 001db232561be06cdaf1b5552394a98c_JaffaCakes118
Files
-
001db232561be06cdaf1b5552394a98c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 21KB - Virtual size: 932KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 905KB - Virtual size: 908KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ