Static task
static1
Behavioral task
behavioral1
Sample
d51f30a4f5f46f0c3847fc2f08c94483_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d51f30a4f5f46f0c3847fc2f08c94483_JaffaCakes118
-
Size
46KB
-
MD5
d51f30a4f5f46f0c3847fc2f08c94483
-
SHA1
49f481d57669ca0212db1f69d1c63297c96cf173
-
SHA256
3dba08fdd6d948f46b3118bea6e9e8bc2b804d32d1392020651336846f73e63c
-
SHA512
8c989d35064bf5da4371784023692db092132ef5e8ef4d8c509f6b8e2a60b87af19281e3230fdfe9c414432d8ff7adf3fdf6d290059b2222ea49ff9d64fbbcf9
-
SSDEEP
768:mcWKNxt93ht7vsZVjgIBbMarWSRf6uDqJrIPm27npad2vrPSN/lUg/PSt:mcWo3LUnBbhbZ6TOPfpad2vTYBS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d51f30a4f5f46f0c3847fc2f08c94483_JaffaCakes118
Files
-
d51f30a4f5f46f0c3847fc2f08c94483_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 378KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Polyene Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE