Static task
static1
Behavioral task
behavioral1
Sample
d2534ff375b1d25af7398c6f29c1e3dc_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d2534ff375b1d25af7398c6f29c1e3dc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d2534ff375b1d25af7398c6f29c1e3dc_JaffaCakes118
-
Size
34KB
-
MD5
d2534ff375b1d25af7398c6f29c1e3dc
-
SHA1
ed5419532763d0fef7d89f969e502e82dad90ee5
-
SHA256
c74b0f0032eb0c2e02b51839782bbf5ef492134285dbd3067e5e32349311eb7d
-
SHA512
cf27262c25bdddaa98b58d17ebf5d62fbce2f5ff2703f979667369ee53a4b99616cd4fae57f05560fcd7ee1fb9512d825ebc115bf526f7caea535f2a1a7241e3
-
SSDEEP
768:sMd88jJRWk9rxNBntbWklQblaBZOGjL0E87fLJDaI5:8KRWk9N5WYMMjLofLJDv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2534ff375b1d25af7398c6f29c1e3dc_JaffaCakes118
Files
-
d2534ff375b1d25af7398c6f29c1e3dc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 224KB - Virtual size: 622KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 164KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ