hehe
Static task
static1
Behavioral task
behavioral1
Sample
d0b25a96503dc2f21581e927872322fc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0b25a96503dc2f21581e927872322fc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d0b25a96503dc2f21581e927872322fc_JaffaCakes118
-
Size
11KB
-
MD5
d0b25a96503dc2f21581e927872322fc
-
SHA1
a19d65f0c5a4810950a4048de332556771529675
-
SHA256
746e8ef8cd8ef9d2b6a4194679e04c8d73b38e1213083fb4141baab3f04744d6
-
SHA512
06e33af47bf1ded13aa4c99f56d522f33efc4638a510703bc82a10d913ba1530a9e4a98b96ee8558f289a47dee3582b5dc30f4844e8c2a29b65aeb296a2b1ad7
-
SSDEEP
192:1wta4Aww50/eu3y41HccQBL7u+Q7hKC6z+EM3wL9O1jMNnPuUWh1fmYtGJkgUwuX:R4AO395817tQ7hNd95jWG13fmYBh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0b25a96503dc2f21581e927872322fc_JaffaCakes118
Files
-
d0b25a96503dc2f21581e927872322fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.Upack Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE