Static task
static1
Behavioral task
behavioral1
Sample
d0eba41319fa5fa9b625fbc96c75489c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0eba41319fa5fa9b625fbc96c75489c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d0eba41319fa5fa9b625fbc96c75489c_JaffaCakes118
-
Size
17KB
-
MD5
d0eba41319fa5fa9b625fbc96c75489c
-
SHA1
f006d94a294c7daa99319fed396730757d9d60ef
-
SHA256
c33194172839754bb9e8ce6f706dfac6e85d16b931e955ca058c3ba5e3129264
-
SHA512
ba969bcc3537d8ded06b90c7df80d681b3fe9b43da369b38b77d16dbcf05703b96052cf379185a2cfcae59dddf4e1d86b8850f4a19c07a84a5201d9916c70c67
-
SSDEEP
384:6TQe/AFfJRydk9VK8w2ojqQhbcP1AifMJvSi2RVb49f:NL9Ok9E6tdM7oC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0eba41319fa5fa9b625fbc96c75489c_JaffaCakes118
Files
-
d0eba41319fa5fa9b625fbc96c75489c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE