Static task
static1
Behavioral task
behavioral1
Sample
d2161ad35252429492576ab68a3a498d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d2161ad35252429492576ab68a3a498d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d2161ad35252429492576ab68a3a498d_JaffaCakes118
-
Size
139KB
-
MD5
d2161ad35252429492576ab68a3a498d
-
SHA1
c13517439598d37c3eac67b042456526e4af57bc
-
SHA256
14ae11af4978302fe6fd36b2b342f9142b96246b5105c47225793781fa92ff78
-
SHA512
36ad492199385c4005745a6cb5d1b15da5014ae4e67b746d72d2fbde775035a1d740f91b394cb864c4c0c93105f0cc839bbc82373c6d0765abbfe2bfbad0d830
-
SSDEEP
3072:zH+Mcv5JXXieDEvy1W7rkD+bnAIhRjaN9:zHl0ndEqgkCAaRGn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2161ad35252429492576ab68a3a498d_JaffaCakes118
Files
-
d2161ad35252429492576ab68a3a498d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE