Static task
static1
Behavioral task
behavioral1
Sample
d527661f90fbf94075c2c44b8fa680fa_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d527661f90fbf94075c2c44b8fa680fa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d527661f90fbf94075c2c44b8fa680fa_JaffaCakes118
-
Size
110KB
-
MD5
d527661f90fbf94075c2c44b8fa680fa
-
SHA1
957b14c0f6abb22c3d4abf01fef625d6788575e2
-
SHA256
42e1802eb47b60c1f86e58c1dae8e510513efb1ccc48fadb611e545411ecaa9a
-
SHA512
293f6fef7fc2f6efe831afc0a8c52d4ed40c4809b8ab71b0d755d9653d5b4da9aa0a082af71f46676d74ab47f14256eac8ea17a681b3901bfc0b0304414b8022
-
SSDEEP
1536:vvCXtnG5vP9garUiqkxMZU/xcdbVOSvJxLSSLd5tUz6tjgqhxu7G95HlyJerGn+X:AtGrLdqZU5kxVhDo6JgqhxuiReernf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d527661f90fbf94075c2c44b8fa680fa_JaffaCakes118
Files
-
d527661f90fbf94075c2c44b8fa680fa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 212KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ