Static task
static1
Behavioral task
behavioral1
Sample
d1539e12265b3d07e8778dbf2d37d9f7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d1539e12265b3d07e8778dbf2d37d9f7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d1539e12265b3d07e8778dbf2d37d9f7_JaffaCakes118
-
Size
1.8MB
-
MD5
d1539e12265b3d07e8778dbf2d37d9f7
-
SHA1
a51143c3836154ae231b1e470ca0fa154834a08b
-
SHA256
838c6e2242bb71440da5fcf37d0fe2c273248423ce66386b0d146cd527026a9f
-
SHA512
2db12ac9fe8a22f338ccf9a2de73e800e4bea9f57e2fa5867545408779d73e6a2f8ec4a5a47d531caaedb3653cd67f936765ac60f4e8474516e59756cdff4331
-
SSDEEP
49152:MIFxK25vcv8+j5jBc+dGy3CCHIlBkORruEoDk76k6t:MCxt+vcpuFORKD3l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1539e12265b3d07e8778dbf2d37d9f7_JaffaCakes118
Files
-
d1539e12265b3d07e8778dbf2d37d9f7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE