Static task
static1
Behavioral task
behavioral1
Sample
d0cb6d322ee2373b83e39edfd5f214eb_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d0cb6d322ee2373b83e39edfd5f214eb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d0cb6d322ee2373b83e39edfd5f214eb_JaffaCakes118
-
Size
46KB
-
MD5
d0cb6d322ee2373b83e39edfd5f214eb
-
SHA1
a6073ecec36564a792e7ff977cdefca206d9c1ab
-
SHA256
43143aa5c124b47ea599e174a58367475a497241212b3b1fc3509ecdea892533
-
SHA512
0a17e3cb473d6afa5d44fa211268a9547cbf1cab8301398d284d8dcf18324b9b9b1ef0e0b2bfe8ae6a6a9bba62bf35dce31b82b4c82b73a07ee8e5d51e68046e
-
SSDEEP
768:6D0o84JDmwK7gPNrbKcgBufdqxtQCzduWrtMd/QxQW:74AwjPVKTBuQxYctMcT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0cb6d322ee2373b83e39edfd5f214eb_JaffaCakes118
Files
-
d0cb6d322ee2373b83e39edfd5f214eb_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 35KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ