Static task
static1
Behavioral task
behavioral1
Sample
d0112fe2fd502a151355e5927d0b5b9f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0112fe2fd502a151355e5927d0b5b9f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d0112fe2fd502a151355e5927d0b5b9f_JaffaCakes118
-
Size
174KB
-
MD5
d0112fe2fd502a151355e5927d0b5b9f
-
SHA1
6e5aa6dcef6f7df29eea4031f7579012ecd90ed3
-
SHA256
7da609276933e8dd67a7c91adf455c9a3c2e56364a8ef909edb39f96d79fcc00
-
SHA512
2413d29b2028d56a84d65056889c0248e4f22ade5040bd7510ca5511d28e1d535690c876c0da4cf94d8a5d5591fd1abed37339833e4afbf441756aca28c358be
-
SSDEEP
3072:VRirQX4pwjz22mGqsanbDogIdNRLap6n3auXfz51J4zSgjmL3ODSr:VBZf22dNJgIjRGpsB4Jq+DK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0112fe2fd502a151355e5927d0b5b9f_JaffaCakes118
Files
-
d0112fe2fd502a151355e5927d0b5b9f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 165KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
hndwxe Size: 958B - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdata Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ