Static task
static1
Behavioral task
behavioral1
Sample
d550a1b6928c1d85c4c396b9678454d0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d550a1b6928c1d85c4c396b9678454d0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d550a1b6928c1d85c4c396b9678454d0_JaffaCakes118
-
Size
123KB
-
MD5
d550a1b6928c1d85c4c396b9678454d0
-
SHA1
3504f0d7ea8e43c83bcc63e3fcdfb1ed489637d9
-
SHA256
805329fc1557fbdd1f21df19bf6e56e419c097d8528143e3280372ce6ee6ae3e
-
SHA512
1b7d88b4ce5a49b056acce2ab338a211af9a3cda693a81613409eb8181170c56d7e0d65c67c8749ec7df594d0344c818c74769091b6a44437041fb1800893317
-
SSDEEP
1536:KUA8SRNj73r3g6odqJhXVMlN9NRqdfngYCMeURsoqejzwFUr2/jgVMvM+gaOdg0o:SaKcqhSq0+rmsVz+nOufIndtLzy5eTa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d550a1b6928c1d85c4c396b9678454d0_JaffaCakes118
Files
-
d550a1b6928c1d85c4c396b9678454d0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 269B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 676B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ