Static task
static1
Behavioral task
behavioral1
Sample
d2b5cada059a9fed0d660c4623b3f78b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d2b5cada059a9fed0d660c4623b3f78b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d2b5cada059a9fed0d660c4623b3f78b_JaffaCakes118
-
Size
45KB
-
MD5
d2b5cada059a9fed0d660c4623b3f78b
-
SHA1
42f9271e057381cc5ca1ee1b0ce75b41c30a420e
-
SHA256
585787f2c365501292fce056ad0dbc66519c52ac1404d7889ea4beb1df9dd207
-
SHA512
ad4ca8045e81bb706882a435962711288905b52cfb1c1459cf27778b7be3a577f7eabe0b43be7d471e7cd8d580b23546c309cbbc6465e872580d0c8947d8d7aa
-
SSDEEP
768:7htzKG23wuiuzKfcW+7X7EFxeHFJjjEA2+e8c6HGp1yPfiJZwhJD:7Dd23wuigF7sGFJPS6mp1yPqfED
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2b5cada059a9fed0d660c4623b3f78b_JaffaCakes118
Files
-
d2b5cada059a9fed0d660c4623b3f78b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ