madTraceProcess
Static task
static1
Behavioral task
behavioral1
Sample
d002735e9b8761fc9a8023beceb5f46d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d002735e9b8761fc9a8023beceb5f46d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d002735e9b8761fc9a8023beceb5f46d_JaffaCakes118
-
Size
3.4MB
-
MD5
d002735e9b8761fc9a8023beceb5f46d
-
SHA1
6f50fef457c5646aa72bdb165f169a004b8d7e77
-
SHA256
77e79e8efc9e0df19822c11a7bb5d2dd4324a7f37e1b250f3a07de5b9cc9f9a6
-
SHA512
e5d3484311899dd27b3e82d23b25e4cf886c2df85b1840dfaceeb2c5af51e19981a2b141ebf9bd18dd15f9b5ee9ff86439c4b224214e807e6a582944a59f2062
-
SSDEEP
49152:CEv5xfs4skrNuSoOlPShCgQ854y7oObfP06rVNiG6WpRrBF:CEv3fs4s6EhQtysSP06rVcGjZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d002735e9b8761fc9a8023beceb5f46d_JaffaCakes118
Files
-
d002735e9b8761fc9a8023beceb5f46d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
.text Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 109KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 26KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 87B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 235KB - Virtual size: 234KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ