Static task
static1
Behavioral task
behavioral1
Sample
d06774c4b7fbed21a56ea0eba9d198ba_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d06774c4b7fbed21a56ea0eba9d198ba_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d06774c4b7fbed21a56ea0eba9d198ba_JaffaCakes118
-
Size
41KB
-
MD5
d06774c4b7fbed21a56ea0eba9d198ba
-
SHA1
90a8e30e8391953627a75d76b22240303efc3317
-
SHA256
920d04cc1d6614d2aeb170ad515d59e4dcf40797e1cb70922e9717de3141e4bb
-
SHA512
372a9211ce5f3fe1c3bda1c2022a30450d64b741de9690839726d81bae25cc6857a592d57de2b07fa8e567ff186f7a0846f09d3a1007affc467ee3c670e27f4e
-
SSDEEP
768:shAye3ZpMpw85sX/1kH5/JfSmcIlHcTj3TdqO/j9YSlk+fqlSxSE5VmyqnJrmu:nupn+qZARSKDTdqAblk+fqlQSE5VmyqL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d06774c4b7fbed21a56ea0eba9d198ba_JaffaCakes118
Files
-
d06774c4b7fbed21a56ea0eba9d198ba_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.data0 Size: 512B - Virtual size: 196B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 580B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 498B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE