Static task
static1
Behavioral task
behavioral1
Sample
d06a910a32dd830201d54e9fb5c51e87_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d06a910a32dd830201d54e9fb5c51e87_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d06a910a32dd830201d54e9fb5c51e87_JaffaCakes118
-
Size
10KB
-
MD5
d06a910a32dd830201d54e9fb5c51e87
-
SHA1
fde73ccd33fc23982a33c702d2cb958e42e57e58
-
SHA256
e4cda74ab530b46c7e8a666e1dbc4be3513a4a942e31bc1fae5ee9a81d771cbf
-
SHA512
d14db8df92b8dc71d35d0d2eabf37afb56c56dfcd8ba81fe9523e258bee5fd68b5ccd85de0fa2f6a44f9c3d9f80059f621eaa5935c6cbf42412d9de36ce94732
-
SSDEEP
192:nmP2NJysGrYueu3iPCT0f1bwWaST/U2uwdekWejUnV6RWPYBG1a3U5Dsk:jY9Y2+fZ0ncG1ak5wk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d06a910a32dd830201d54e9fb5c51e87_JaffaCakes118
Files
-
d06a910a32dd830201d54e9fb5c51e87_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 580B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ