Static task
static1
Behavioral task
behavioral1
Sample
d2ee54cc09752715a346a8dd38dd4f33_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d2ee54cc09752715a346a8dd38dd4f33_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d2ee54cc09752715a346a8dd38dd4f33_JaffaCakes118
-
Size
214KB
-
MD5
d2ee54cc09752715a346a8dd38dd4f33
-
SHA1
4689b8a37e2f886f0ad92b3341eae96b7b676934
-
SHA256
f41a170d1b7e86bc0a1d0d3efbb97e061b68dd2252532755d1736454e7607863
-
SHA512
3a7e8a19e684057946b80b1838b903099e0212592e72e6fd0a1e85914bd75475428cec5e483cf665e074d082ab5adaeb3ba93051e0d0156b96ebe1ca140f3e85
-
SSDEEP
3072:TYafmrTkQvyvXRH51mbzJwlEBNqp2tAGz+loq9IM7FL4Ye/JpkWZjdsTl+12i0Bd:kesTuZm5xBNOK79q9J1+zQkcHB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2ee54cc09752715a346a8dd38dd4f33_JaffaCakes118
Files
-
d2ee54cc09752715a346a8dd38dd4f33_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 97KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 21KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 11KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE