Static task
static1
Behavioral task
behavioral1
Sample
d09130df66f8216afd8dd50705fafef3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d09130df66f8216afd8dd50705fafef3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d09130df66f8216afd8dd50705fafef3_JaffaCakes118
-
Size
552KB
-
MD5
d09130df66f8216afd8dd50705fafef3
-
SHA1
24cfa4c2b1b9a32abae097becc9d53e6add96cca
-
SHA256
d8fcbb4c01bdcc5c1417153657ce77f4157eb85bbe30b340bf817870b1bbb4cb
-
SHA512
f80f93b57b4cf57700915df19cf2f58fc2bc4c6230bafe8ae34346baee27a278dcb685e67b735b487eb1bfacd74a55f0c7579cdebf92f16283348ca192108824
-
SSDEEP
12288:peVtTUOIg4VxnRY6uuvkcJcCNG21fDgbq38vSi99JZ14H1sW5deS:mtgOIJGgvHJcg10bqRgJj4d5H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d09130df66f8216afd8dd50705fafef3_JaffaCakes118
Files
-
d09130df66f8216afd8dd50705fafef3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: - Virtual size: 592KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 551KB - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
520mm Size: 6B - Virtual size: 6B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ