Static task
static1
Behavioral task
behavioral1
Sample
d23ac52ebffe4eef2c2f2d85c8d8a04c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d23ac52ebffe4eef2c2f2d85c8d8a04c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d23ac52ebffe4eef2c2f2d85c8d8a04c_JaffaCakes118
-
Size
479KB
-
MD5
d23ac52ebffe4eef2c2f2d85c8d8a04c
-
SHA1
1b03a2f22f943576f0a800f8cb25092252e79a8d
-
SHA256
a6d74d1d0ce2da64d0be2f44a27587e62b7df37fe84fb47b1d4c63dd8319ffa1
-
SHA512
6d1651d9618b40bf9b9752929cc9f30deebc3799623765fb20349bed6fd6ff27d19b48b18b66f39a32c59b38cb347c18c52e294a71e391e2bcb1675cb8184d44
-
SSDEEP
6144:IivkB/MJBQF6pZHbIz1SBwXGyZrUSchtoAuLKnwnvlNTGRz94CGjf9tintZxrQK/:0kJBQFCSWl3htqKC9NTEz9qb9tinixi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d23ac52ebffe4eef2c2f2d85c8d8a04c_JaffaCakes118
Files
-
d23ac52ebffe4eef2c2f2d85c8d8a04c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 441KB - Virtual size: 441KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ