Static task
static1
Behavioral task
behavioral1
Sample
d2f23ca7d123863a2cec4c1ed95a7136_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d2f23ca7d123863a2cec4c1ed95a7136_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d2f23ca7d123863a2cec4c1ed95a7136_JaffaCakes118
-
Size
126KB
-
MD5
d2f23ca7d123863a2cec4c1ed95a7136
-
SHA1
bdfb3e0883fd864842f323cc1e3c4ad9d4f88751
-
SHA256
8de92a96774699ed14ca64da3f1d5c80715b0dce3bd3f7e4e49657951852703c
-
SHA512
15eafd323cd76b56604506c7c85fa2e5c9b4fbcf25a6f111dbac10ecd4df70105859b51463bf53956346e24cc21359d4161ce5e578b1446d69e6383234f3c613
-
SSDEEP
3072:IxTqpdA3f6QNf2IPO4DpmWpAsfYbTOBoefYi6a9k20tA3Z/ccnsmk:q2pdqfv2IPOGfXf5ovWJUwsmk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2f23ca7d123863a2cec4c1ed95a7136_JaffaCakes118
Files
-
d2f23ca7d123863a2cec4c1ed95a7136_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 12B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ