Static task
static1
Behavioral task
behavioral1
Sample
d1cda5159c0e1cdc87a3a09876cf11d5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d1cda5159c0e1cdc87a3a09876cf11d5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d1cda5159c0e1cdc87a3a09876cf11d5_JaffaCakes118
-
Size
319KB
-
MD5
d1cda5159c0e1cdc87a3a09876cf11d5
-
SHA1
6a87f5dd229ae2f53357ff15674f0bd3a2985dd7
-
SHA256
9004c310aec128f79b746bd49c85430fc5599d49bccfdd00e481298b156b8d10
-
SHA512
9d0762cd8d559bc513748bc9410ab2b4a4a06189bcdd25db5b0c8b5c7d8d3802bc9d19ebc5792a7594999da0f5adde087220f76d1583e3c69ef7491de8f34263
-
SSDEEP
768:30Lv/ClY2XxSedKo6iXnvX7GWsrdZJ4aJX3UFXEz4+OJHQX9kP1P1ozG4ODDoLoE:MQY2UeB6EPMdZJJaXE8+OGM1oKE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1cda5159c0e1cdc87a3a09876cf11d5_JaffaCakes118
Files
-
d1cda5159c0e1cdc87a3a09876cf11d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�~��+b�� Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���*�t Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE