Static task
static1
Behavioral task
behavioral1
Sample
d18a04b9df59db534873e7e30dd18ca3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d18a04b9df59db534873e7e30dd18ca3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d18a04b9df59db534873e7e30dd18ca3_JaffaCakes118
-
Size
254KB
-
MD5
d18a04b9df59db534873e7e30dd18ca3
-
SHA1
e00f2ca047c8d7a44c384a9b6979b31779b5dbea
-
SHA256
ae361a6d8c3ebc4b0527000c0394aa7c922f22b66b02924ab02a5006da691c69
-
SHA512
34930d2b589e26cddf8b671aaa8352154b925bdf7b1e9b156cb9dc9bd05f8a100c9f6f51d0570049672cc57f907517a9a2632d0bf3ac1e241cd63403a811c2f0
-
SSDEEP
6144:4iqvdXjNswTcCDtIeLpdq9AIOQ2q2QLibYn3aHnq2QLibC:4igdXCwIgIianOdbY3IRbC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d18a04b9df59db534873e7e30dd18ca3_JaffaCakes118
Files
-
d18a04b9df59db534873e7e30dd18ca3_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 223KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 396B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ