Static task
static1
Behavioral task
behavioral1
Sample
d021511bda413b261a4168ca0eb87d8d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d021511bda413b261a4168ca0eb87d8d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d021511bda413b261a4168ca0eb87d8d_JaffaCakes118
-
Size
641KB
-
MD5
d021511bda413b261a4168ca0eb87d8d
-
SHA1
40e2e50db969ec90fee4d5ef5a1557d8a1b94e1f
-
SHA256
1e0d3cb5436172a1e8e791d76054ae8add1c2d7f01d7fdd6dade1a35de52962e
-
SHA512
bfc9d74a3d725fca967e544988b8e2e9885b5e23e96543354a753406a3e5f63558773e70900cd1d7a792e16c1d8508df09d6c6997acc98ca60153bfc7c685a92
-
SSDEEP
12288:AMAi00JcKpn053TAn8eEU56fTVlHjpE9pt2TTA1dtiHUqUcp4lL:P00Jp0588eh5Oja9pt2mtiHFqlL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d021511bda413b261a4168ca0eb87d8d_JaffaCakes118
Files
-
d021511bda413b261a4168ca0eb87d8d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 405KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE