Static task
static1
Behavioral task
behavioral1
Sample
d1a30e9429d368b8e74e6af4456cb234_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d1a30e9429d368b8e74e6af4456cb234_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d1a30e9429d368b8e74e6af4456cb234_JaffaCakes118
-
Size
54KB
-
MD5
d1a30e9429d368b8e74e6af4456cb234
-
SHA1
177d23c0fdff6ae23e00c8fc18d0fa137fab1bd3
-
SHA256
6601f00b721759d4dcf489932346e1684cae38d938b44a615ccf636c0c45659c
-
SHA512
1fbd0118045af66006871fb1d83356e919b45ca0b1b06403b801286e19ad4961e72b6be79a49c5e3e72b36385a2d5cbe1fa222d72e624f17aaeeaba358a27428
-
SSDEEP
1536:Jv+VE4RDhZVNbh0Bc6MPEF5cukt3+QtObiZ3HQxxAe1:Jv+G0F0BcuA/t3+QYbi1HQxxl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1a30e9429d368b8e74e6af4456cb234_JaffaCakes118
Files
-
d1a30e9429d368b8e74e6af4456cb234_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
x3rr0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
x3rr1 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
x3rr2 Size: 555B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����� Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE