Static task
static1
Behavioral task
behavioral1
Sample
d1aea34b5ee53b6147ae6c6d79945da2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d1aea34b5ee53b6147ae6c6d79945da2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d1aea34b5ee53b6147ae6c6d79945da2_JaffaCakes118
-
Size
277KB
-
MD5
d1aea34b5ee53b6147ae6c6d79945da2
-
SHA1
312151b5c252372dbcf47b1a86d31081ef004514
-
SHA256
c0211b6a81519a6bdc3291769fe0093fb755259e7daf0bab1a385a93b196f02c
-
SHA512
a7721c8c6bdea7acc212b6ea55dafdabbf302f5ffce23effeb7bb758be4e9cce12b080a03c17bcc88d7b0c72370b0a5207443c8eac0fd910a5ae7b98614cbc42
-
SSDEEP
6144:2/5Ulg0dJN5TdwzLUX53FLFztJDRFLMWgJcmStzKXKfHM0W:2BUhrN5pw+53FLFpJNqW4yKXVN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1aea34b5ee53b6147ae6c6d79945da2_JaffaCakes118
Files
-
d1aea34b5ee53b6147ae6c6d79945da2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
nsp0 Size: - Virtual size: 796KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 276KB - Virtual size: 282KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE