Static task
static1
Behavioral task
behavioral1
Sample
d04b6d711fbc399ee59a9638bf7dba1b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d04b6d711fbc399ee59a9638bf7dba1b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d04b6d711fbc399ee59a9638bf7dba1b_JaffaCakes118
-
Size
13KB
-
MD5
d04b6d711fbc399ee59a9638bf7dba1b
-
SHA1
131c51f1371ebfcda98b164d1dd92658bec4c92b
-
SHA256
738bbf23da9b755a2328cfb7365631d8cf8aac28afa9b157fff244abba84c78e
-
SHA512
d7d53590fa1298e242e74e38e9c71f54e211ba62800f57e55e8ac1e62a21d4d3c534aab3ad12ea5cf2548b77ec2baf35c464b53720af9bb8827eb44ff68eafbb
-
SSDEEP
192:/xwhdBRGue/2s+GPhaQJnWpUizQQSDsJjLYY7KSpqNFEwRCdip4E2uNtDdxQQ9h:5whdvGJ2sXZaQJnWG8j37DwR/x2qQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d04b6d711fbc399ee59a9638bf7dba1b_JaffaCakes118
Files
-
d04b6d711fbc399ee59a9638bf7dba1b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 236B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ