Static task
static1
Behavioral task
behavioral1
Sample
d19d1b9541762794b66283f5d1226a2f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d19d1b9541762794b66283f5d1226a2f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d19d1b9541762794b66283f5d1226a2f_JaffaCakes118
-
Size
28KB
-
MD5
d19d1b9541762794b66283f5d1226a2f
-
SHA1
b2b59db42f41826b360577598208c59156ab098b
-
SHA256
b48c6de6a87924c9348af9bccd5e02845464b1de4944babf9ecc9afc6812c32c
-
SHA512
4d94174561cbb13cb487938d40cd922abc5abf8df2c6cfd4da88157240085af7b56dbba67d1b3fbcb59bfe79fa7f2b9a9207dcbb78c6cff6fb3b658a780d0188
-
SSDEEP
384:6jteo9CZPNvkjEzyAkI8xhETtAsOeoI/k4Io/X8Zo9XrvHmE4WACFmVkXaABM+lc:0eVPZkjEuA18iOnI7KYXrvHmkvmSXNB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d19d1b9541762794b66283f5d1226a2f_JaffaCakes118
Files
-
d19d1b9541762794b66283f5d1226a2f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�m-B�g Size: - Virtual size: 316KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
&���/Y�J Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE