Static task
static1
Behavioral task
behavioral1
Sample
d544e82cffd9822f958fda1feff5a2aa_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d544e82cffd9822f958fda1feff5a2aa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d544e82cffd9822f958fda1feff5a2aa_JaffaCakes118
-
Size
84KB
-
MD5
d544e82cffd9822f958fda1feff5a2aa
-
SHA1
42f01f56bb2a7ee4fd79f92ec97d26fed632433d
-
SHA256
2ed8f0c3d3e5d6e5c28788c745f84f82d78ddc3a6df2991bdfaa2f5a2d99b18a
-
SHA512
4274c1ced03f930d357be4149139be5053587642e3c8f4c3dbd9e23f76aeb4e8561865f381dea0058427475f0475a0109f8f681e14eaad8cbd414d201d94a1f3
-
SSDEEP
768:HITkiPqUczphlqIt0YUwoMZAE2fZg8UFe86c5QGuVojZG:QlYjoIt/Uw1ANu886mQGuVolG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d544e82cffd9822f958fda1feff5a2aa_JaffaCakes118
Files
-
d544e82cffd9822f958fda1feff5a2aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE