Static task
static1
Behavioral task
behavioral1
Sample
cde3f2577c87f199b0b7d0f0c330475b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
cde3f2577c87f199b0b7d0f0c330475b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cde3f2577c87f199b0b7d0f0c330475b_JaffaCakes118
-
Size
97KB
-
MD5
cde3f2577c87f199b0b7d0f0c330475b
-
SHA1
16ee12794bb0ab67cbec8b0c50177f0321e7544a
-
SHA256
09e248e2f4b37acd9359c7adaa0bd7dc03dda26f227002264a3c61972ef6dafc
-
SHA512
c623110baf7857a2fb73e215956954215c605a36462e91db122ae1ab52c5f2ae8277273e6318f37e81c6f7ede22c4d019e54dd9b511c110eccd58a7798f1022d
-
SSDEEP
1536:5YqTBURB6/cYqrS+cAUoUTOWYR0z0iNnTOHh:5YqTQk/cYqrCAET5Yez0An2h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cde3f2577c87f199b0b7d0f0c330475b_JaffaCakes118
Files
-
cde3f2577c87f199b0b7d0f0c330475b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 276KB - Virtual size: 275KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
microsof Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ