Static task
static1
Behavioral task
behavioral1
Sample
d1bb103a502c90e096b3a7d6866e0060_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d1bb103a502c90e096b3a7d6866e0060_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d1bb103a502c90e096b3a7d6866e0060_JaffaCakes118
-
Size
302KB
-
MD5
d1bb103a502c90e096b3a7d6866e0060
-
SHA1
906dce21f79d65ac155b4a237c4947c9d653e41f
-
SHA256
968d7e45199aad4590517ea75c77895dbd498f3b2ee3235dd13304d6126aea8c
-
SHA512
c02abf4a9cb35f263030a461db76be2ccf78d1d138698285a6b9f02d551a3e17075701841c9baa4c14a6a1aa6e0f6256e5d6f49154dbf50b5e9296d0d572848d
-
SSDEEP
6144:EgvR92tX3cgTBXAy4DLHL97L7m7wkRMMy2Dt6JXDM:ElluXtkqMjt8XD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1bb103a502c90e096b3a7d6866e0060_JaffaCakes118
Files
-
d1bb103a502c90e096b3a7d6866e0060_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 205KB - Virtual size: 424KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 482B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 91KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ