Static task
static1
Behavioral task
behavioral1
Sample
d007a745f9a94fac685f11781f569d70_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d007a745f9a94fac685f11781f569d70_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d007a745f9a94fac685f11781f569d70_JaffaCakes118
-
Size
525KB
-
MD5
d007a745f9a94fac685f11781f569d70
-
SHA1
8fee7888136270f531ca0dbebf235d75388195d1
-
SHA256
ac665ea9702947df295c072420ee72e494e081e07f22d6d9872edc00b5d17923
-
SHA512
2f08df2c0fd15afb0dff5d3170ea6f97f747eec80311a57e72e910e8b4c6e6a6db89ba299f8aa40f3875c6a52582fbfa12aa51115b2faf6a9fb906072d101606
-
SSDEEP
12288:DParhzY6/T/HNuTktuN2TLEsc6jxx/W8uYkAaU2lLXm:DirPr/HETktPT4exu8uLLU2lzm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d007a745f9a94fac685f11781f569d70_JaffaCakes118
Files
-
d007a745f9a94fac685f11781f569d70_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 515KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
STA4 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE