Static task
static1
Behavioral task
behavioral1
Sample
d23d4c1d56afd999bf79fb8d4403ebe1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d23d4c1d56afd999bf79fb8d4403ebe1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d23d4c1d56afd999bf79fb8d4403ebe1_JaffaCakes118
-
Size
4.4MB
-
MD5
d23d4c1d56afd999bf79fb8d4403ebe1
-
SHA1
2638c3ab849e27212ea56d8631153363043c3456
-
SHA256
42ea1cb0449bf305c0be51c4bda3373ddc61441ec66bd2fce3c8683768478b96
-
SHA512
1f8f19362374f803d213c474ca76566780da8e63d48a02b00f22aa5ebd202012aac932402efd20bf81be8f49d5a8cbe1b911c5d64f5ad9ebe89c37e4c1ae43e4
-
SSDEEP
98304:C2T/u0Y39aLWLbsIKMHPBgK1ieLsA+zxTOnAjYUAoX:C2C5NaLWLbsIfT8DA+lQSYRo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d23d4c1d56afd999bf79fb8d4403ebe1_JaffaCakes118
Files
-
d23d4c1d56afd999bf79fb8d4403ebe1_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.asm Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.x64 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
.aes Size: 3.8MB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sse2 Size: 608KB - Virtual size: 608KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE