Static task
static1
Behavioral task
behavioral1
Sample
d311ab34fae2c01b8dc1c077191d425c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d311ab34fae2c01b8dc1c077191d425c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d311ab34fae2c01b8dc1c077191d425c_JaffaCakes118
-
Size
5.5MB
-
MD5
d311ab34fae2c01b8dc1c077191d425c
-
SHA1
6e20ced517f698a9ba24eb6768705610b77648a3
-
SHA256
c821db7f9df81af71e0524c35616a79c3cf7b4979c51394b7366ef4aa496b6a9
-
SHA512
fe55fe6f4777df4ae7b67c6ab37b5e974aeb31e815e477e1e88e33ab66b967f8f6eeaa3cf0239b44e79c159216c9e90928638cbb362f15e8e5af45f4457dfed8
-
SSDEEP
98304:BWVe7I/jMlNBrTRMFp6wUv1g6ItwFcwL6qllhiKVkrNqVC9f:I0IoRqpvW1gldC6qlaKVkJks
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d311ab34fae2c01b8dc1c077191d425c_JaffaCakes118
Files
-
d311ab34fae2c01b8dc1c077191d425c_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 125KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5.4MB - Virtual size: 5.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE