Static task
static1
Behavioral task
behavioral1
Sample
d0295a58dd3bb6753a20c1dd548e09c2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0295a58dd3bb6753a20c1dd548e09c2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d0295a58dd3bb6753a20c1dd548e09c2_JaffaCakes118
-
Size
34KB
-
MD5
d0295a58dd3bb6753a20c1dd548e09c2
-
SHA1
077e4d576d6526bcd9203e16e9e876e4ffce674b
-
SHA256
e5146b864f705c1d291b5144d52ee421a1f0b52bce1f3a01e8cc8689bb73c6bf
-
SHA512
04f84cba9c89c15427b8ef5566d6f63f1c86c82ea87c187a545bafb220ff1eaa6c69e4a5bdc4652feb124aa380f501e6947de3aa16f43e19bcd182d299a9268c
-
SSDEEP
384:PV/kfDV2rrr1prZpZmnqpB/1RmUMO/cMauU9dIi5:PVMrV2rFprZpZmnABdRmUV/cMDUsi5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0295a58dd3bb6753a20c1dd548e09c2_JaffaCakes118
Files
-
d0295a58dd3bb6753a20c1dd548e09c2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 204B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE