Static task
static1
Behavioral task
behavioral1
Sample
d341b75593847353d8ae6e63c7ae48f4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d341b75593847353d8ae6e63c7ae48f4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d341b75593847353d8ae6e63c7ae48f4_JaffaCakes118
-
Size
380KB
-
MD5
d341b75593847353d8ae6e63c7ae48f4
-
SHA1
3c98e2e926e76f6f0cc99837f344c30ecfb95cf1
-
SHA256
5deb41dfa190403a650680cfe2a4bd0dd1de75d91dc5e7f1bd69683d1d844723
-
SHA512
87be6f634094c9509fd456a69d375be088897c0a2ef60f28e10255285f8289fb3e2427a81877e507fb2d2e9f4ebfa4a4f78bf63cd585246defc11e4a196a4f67
-
SSDEEP
6144:wvxkUitrGz3NpSE+hDxIF4VS1rYnRmTzuF058+hUhWlNBtclWDd1PpeL/ha4CdW3:Uklimjh4rUuzuFQwhWnfclWDd1PpeL/5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d341b75593847353d8ae6e63c7ae48f4_JaffaCakes118
Files
-
d341b75593847353d8ae6e63c7ae48f4_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
>F0%o'RK Size: 512B - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
`+.CuO\3 Size: 379KB - Virtual size: 396KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE