Static task
static1
Behavioral task
behavioral1
Sample
d087cd72996d74ae4dfe60b3bb8b9fae_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d087cd72996d74ae4dfe60b3bb8b9fae_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d087cd72996d74ae4dfe60b3bb8b9fae_JaffaCakes118
-
Size
706KB
-
MD5
d087cd72996d74ae4dfe60b3bb8b9fae
-
SHA1
ed133f13364c46d3efb0632694796bc35969b4f6
-
SHA256
be04b088166d1efeed9b978b9c9e48cc93d3a997486cb120d6c61d1af6e8184e
-
SHA512
e0b0a0ca901dde8081649c6d06ddf3fcb76b5d35c79ec0d4c443e53ea0f33d98b025ad576c2f24076fc0e51308311ecf64bbce8f548be1ca2d8b986b3017dfd3
-
SSDEEP
12288:TldefXigc8blYUpYhQ3lfBIBCF3Z4mxxa+GwoB6F55NafieVQYde4kMtI:TzgygBZYUpYEfuCQmXa+BJ7vjeVQUDkF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d087cd72996d74ae4dfe60b3bb8b9fae_JaffaCakes118
Files
-
d087cd72996d74ae4dfe60b3bb8b9fae_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 20KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 351KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 331KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE