Static task
static1
Behavioral task
behavioral1
Sample
d076c86eee45257bdb22112313bfb0ff_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d076c86eee45257bdb22112313bfb0ff_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d076c86eee45257bdb22112313bfb0ff_JaffaCakes118
-
Size
6KB
-
MD5
d076c86eee45257bdb22112313bfb0ff
-
SHA1
3a3a9c7fc70816453d7ad221a93f2ab6864fb8fa
-
SHA256
b1885e175eab9fe12c3bb8d552e8e99171e343106976bbeeda5cfedc9cba491a
-
SHA512
478d687bd681f6a7820ec89a18b1d3a97b6b4da8ba8a5e68d7fff7da379769df4514159306f616e9c7dbe707c35901fc6dd531193f2eb4d5dbe8bc0b76247611
-
SSDEEP
48:atbaarY4sPOmo3I4WN8XGBO7plornTb5nk/BBQ1pnVXsokqJZtTtEU/UIrL:CBSo4n6FtlornZnOBBu1V8ArUIrL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d076c86eee45257bdb22112313bfb0ff_JaffaCakes118
Files
-
d076c86eee45257bdb22112313bfb0ff_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ