Static task
static1
Behavioral task
behavioral1
Sample
d1637326ca0efd3e73b39ca0375b14e8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d1637326ca0efd3e73b39ca0375b14e8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d1637326ca0efd3e73b39ca0375b14e8_JaffaCakes118
-
Size
35KB
-
MD5
d1637326ca0efd3e73b39ca0375b14e8
-
SHA1
699cd11962e96c5d58066bf2b57bcd50ce44edc3
-
SHA256
18ac5c485d7b40a24a34c496e1d3943eb30f675b66dcdbb305d65cff1ad9f360
-
SHA512
2cd0af3d61d3c32d8e887a093ef51f008f3fadb6e2a53828c0e20ed1310199d164f38df9cd0229c3b5fcc34f1a97f7dc00a3bf6e80cfb1cc86329cf634faeb64
-
SSDEEP
768:L9sYeREMmxKInddmVcKFkRXMUGAvLLl3om80+0ip5x:OVEFxKInTWkRSyltfcx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1637326ca0efd3e73b39ca0375b14e8_JaffaCakes118
Files
-
d1637326ca0efd3e73b39ca0375b14e8_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 796B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE