Static task
static1
Behavioral task
behavioral1
Sample
d2b2320d636d841a7057b7457da8ac7a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d2b2320d636d841a7057b7457da8ac7a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d2b2320d636d841a7057b7457da8ac7a_JaffaCakes118
-
Size
1.5MB
-
MD5
d2b2320d636d841a7057b7457da8ac7a
-
SHA1
73d569f92080ddf7ef770d6a9f0e1fa4cc25ac28
-
SHA256
8178a4bc85b0f09b549be249e77ac6b071b6d9a67bc065afb795e0f3c3da1fea
-
SHA512
3c3e112c6f5c3eac3618e95ffd08c97906a2b5389a0d680f15208457f9197b4b545c9c38267f12f2233927488335978e7065ea090f40a27a03e615c339afb187
-
SSDEEP
24576:HL59d5HT7i1sDGy3oneyiGfCCTNQype1bPSJdcLhAC7o3M0dXHJoog73v4wSsrq6:HFpW1sCriGft5Q96JkXoXlK3AwSMqDG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2b2320d636d841a7057b7457da8ac7a_JaffaCakes118
Files
-
d2b2320d636d841a7057b7457da8ac7a_JaffaCakes118.exe windows:5 windows x86 arch:x86
c8fe7f69a8a266ade8cc74131d6f3f37
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32 kernel32
Sleep ��
Sections
.text Size: 840KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 684KB - Virtual size: 684KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ