Static task
static1
Behavioral task
behavioral1
Sample
d00755af1e8a1acf59caa3a3ac6fba52_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d00755af1e8a1acf59caa3a3ac6fba52_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d00755af1e8a1acf59caa3a3ac6fba52_JaffaCakes118
-
Size
108KB
-
MD5
d00755af1e8a1acf59caa3a3ac6fba52
-
SHA1
8f55d27284244df2153ffa5b80e9df97ae79be8e
-
SHA256
cb31ef68f44a1f1e06dd6f320a76f94c13968b8a968b3fc16c6d42af8a3637bc
-
SHA512
69b11f726d620e5df57371a20744ec97dd1d2c47d8573a53c89f3a52d66dd697d372ac241166f21a8c25075abf71b993c7ebfa251dea4f37e5b557d23151c6c9
-
SSDEEP
1536:E3ungvtF60i4dy3TztBS7NwkVaFzgVYOgx1QUGY0oroqK3X9erK9kLT7sfRF:OunGtF+DTztBiNw58xwyys3tMckURF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d00755af1e8a1acf59caa3a3ac6fba52_JaffaCakes118
Files
-
d00755af1e8a1acf59caa3a3ac6fba52_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE