Static task
static1
Behavioral task
behavioral1
Sample
d2e5f62d644564d9608d340efbad6782_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d2e5f62d644564d9608d340efbad6782_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d2e5f62d644564d9608d340efbad6782_JaffaCakes118
-
Size
128KB
-
MD5
d2e5f62d644564d9608d340efbad6782
-
SHA1
c86588a8247c524a20aeeffb5e58fe02e168905a
-
SHA256
bf363cbb6d0b715fcc43b59e1391094a30d87e6d81250a9a079d0153a5a0e8ed
-
SHA512
af98740e490d8654549868f05029de1ce5aab48b449d82baba764f6b287d751dd06a0f4b0aa44ad5bbfb6e5fc648d34d2c1c1ba270f03bc791d517b5324c5d09
-
SSDEEP
1536:2IXidmqd9ymEpzC3hnexF8EFLGsrkVh1CAPdCjlTrQbQAF0E0rwPyR3HUsr3xydD:RXemqWXp2n7EnydxEAF2rayR3ZrMy5iv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2e5f62d644564d9608d340efbad6782_JaffaCakes118
Files
-
d2e5f62d644564d9608d340efbad6782_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 816B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ