Static task
static1
Behavioral task
behavioral1
Sample
d096d50df615e6e27453cf94e63d2c7d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d096d50df615e6e27453cf94e63d2c7d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d096d50df615e6e27453cf94e63d2c7d_JaffaCakes118
-
Size
233KB
-
MD5
d096d50df615e6e27453cf94e63d2c7d
-
SHA1
8d7fa8b706dc66ebad94e17efd7d194d2fa20170
-
SHA256
29b4965b42e382304ff504bc565176e3cc4dbba2bd59f0d6f7da8a95e45f7ae0
-
SHA512
19c6f852a7bc13bd69df728df5bcdb5f23a9b5db7a853de366f87cf0c95b607971b46d8ce56f994ab881e2168d431d61b0c9eb0a9cde2afcc0c19d64bedda1c1
-
SSDEEP
1536:qKt+GJkWdim0X0yeRdkkRxD+lKSsBttUk/M9Yaw04vsnouy8Pm:I9Yi7o6wjXUk/MZsvsoutPm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d096d50df615e6e27453cf94e63d2c7d_JaffaCakes118
Files
-
d096d50df615e6e27453cf94e63d2c7d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE