Static task
static1
Behavioral task
behavioral1
Sample
d2da43b9be5911a69dd4b1eadd3e3264_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d2da43b9be5911a69dd4b1eadd3e3264_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d2da43b9be5911a69dd4b1eadd3e3264_JaffaCakes118
-
Size
223KB
-
MD5
d2da43b9be5911a69dd4b1eadd3e3264
-
SHA1
244718f593333349fa8929c864f9e9fd9c2513ff
-
SHA256
750c9862e076b6a18ffd57b8750bf5fe15c6cabede8b0ed7f4c2e021bbd05f7b
-
SHA512
1328062cd5eb60c126a51c0d9ae31b6455fd4e6ed01c7bd92dc4737f1bb3eff616e424804a03ea632b79767f877d84d1d558f730502d49cadf054800bf94a4f8
-
SSDEEP
6144:kM14r5Ijaoe6dQZKfwcyIz9zwONaoN9/mmwM45qBj:kC4qexZxchUONae/mzM4cBj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2da43b9be5911a69dd4b1eadd3e3264_JaffaCakes118
Files
-
d2da43b9be5911a69dd4b1eadd3e3264_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 118KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 293B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 824B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.relo1 Size: 512B - Virtual size: 388B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ