Static task
static1
Behavioral task
behavioral1
Sample
d0a52f6c328c1a09dee76327fbe8058b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0a52f6c328c1a09dee76327fbe8058b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d0a52f6c328c1a09dee76327fbe8058b_JaffaCakes118
-
Size
699KB
-
MD5
d0a52f6c328c1a09dee76327fbe8058b
-
SHA1
3891f13fd21bf13b93561c9baad02d4bd4ffaa77
-
SHA256
6bb71b932b80e3678b7b8a4ae6568baf994cfb0f7de20c5ff460bf142d319285
-
SHA512
59f3e4363e938b0bb31c846d724c88a4be1c693f8e8b9e84f83a02e6c28c990971c86ccd7908db839ad37a10b66135e7a4d20c502de15e5da26bebdce861b8d5
-
SSDEEP
12288:CRPso7x70jDHvlez83W6hY3Lp1FOG/xHRDLUN97F3Z4mxxMaJpPFsh+QZHVprF:Chz7x747GndTOG/5RkNlQmXMa5crF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0a52f6c328c1a09dee76327fbe8058b_JaffaCakes118
Files
-
d0a52f6c328c1a09dee76327fbe8058b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 345KB - Virtual size: 796KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 317KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE