Static task
static1
Behavioral task
behavioral1
Sample
d19dd9b9ef6011646bc24f7096e19166_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d19dd9b9ef6011646bc24f7096e19166_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d19dd9b9ef6011646bc24f7096e19166_JaffaCakes118
-
Size
452KB
-
MD5
d19dd9b9ef6011646bc24f7096e19166
-
SHA1
e4f437a7308eee2d19d415970f5cabf81ee2dcce
-
SHA256
20a5396deedde03065c26e3320f30be5e4724a62672fdc94696aed975396a110
-
SHA512
55f5b048c851ee846b2a4b5569b65ea89276ddb145fd1a43483ec8e15eb2758168200a982cc23a10e5a563c4535a3c6bcfaa437ea0b08a06c18e5342a589e66c
-
SSDEEP
6144:cj4Y8L1WQUVVKWDA7tvNFXrUo4oVyJN84MgnjR4asJMJH85YZpKMLoVeOsFU4GU5:csT1RqDA7N2o8BJXzxieh6dSvVVvT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d19dd9b9ef6011646bc24f7096e19166_JaffaCakes118
Files
-
d19dd9b9ef6011646bc24f7096e19166_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.TEXT Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE