Static task
static1
Behavioral task
behavioral1
Sample
d312544d4b9e5ca52ba116d2154c1c90_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d312544d4b9e5ca52ba116d2154c1c90_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d312544d4b9e5ca52ba116d2154c1c90_JaffaCakes118
-
Size
90KB
-
MD5
d312544d4b9e5ca52ba116d2154c1c90
-
SHA1
c7ae4f0970a39da9f78340ca78ce802d44e2c51c
-
SHA256
38be6c245e41ba6e12845d54f1d207b90d19232b18e33dc1ff0d963221c35191
-
SHA512
73daac92624a2261988385a59389b58f9ec9f94fa0eae6a916c30e971d0ca559cdaf89e2f3a01219512f1c081b6988b7a4de1f2e4bc244edd233b24583a41fce
-
SSDEEP
1536:qQdQdQdQs5QsnoQsnCQsn/4Qsn/JQsn/VQsn//Qsn/9QsnRQsnYQsn6QsnCQsn2X:qQdQdQdQs5QsnoQsnCQsngQsnBQsndQS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d312544d4b9e5ca52ba116d2154c1c90_JaffaCakes118
Files
-
d312544d4b9e5ca52ba116d2154c1c90_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.dfanocz Size: 6KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.aywvlan Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vcanngc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE