Static task
static1
Behavioral task
behavioral1
Sample
d32af705e0541ab3168c3eeeaff84f67_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d32af705e0541ab3168c3eeeaff84f67_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d32af705e0541ab3168c3eeeaff84f67_JaffaCakes118
-
Size
360KB
-
MD5
d32af705e0541ab3168c3eeeaff84f67
-
SHA1
fd99392f0616f24b5532dc2334360b3a4a8ea9f8
-
SHA256
affad9a192abbdb39fe7515889ffc40efe187b08a0c81b87146028bf091f2860
-
SHA512
d143011903762efbb5d8e1c360a51e49a2516770689424b15f39255a27408a00f3274bdd56c629586b2fcb6ba0a8b648cef8b9533084fb762f11cd873066fa39
-
SSDEEP
6144:NffKmUzjMKLVaJcxlD0kRBdGSutg8dZEJghKlX8zdVZ3ftfVO0MklJGpZ56KRoS:xKmkjMKLVMaD0qwxIJghKlX+dVhfe0MB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d32af705e0541ab3168c3eeeaff84f67_JaffaCakes118
Files
-
d32af705e0541ab3168c3eeeaff84f67_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
���0 Size: - Virtual size: 372KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���1 Size: 355KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE