Static task
static1
Behavioral task
behavioral1
Sample
d33e8b86e3dc169a982330f890fc7d30_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d33e8b86e3dc169a982330f890fc7d30_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d33e8b86e3dc169a982330f890fc7d30_JaffaCakes118
-
Size
220KB
-
MD5
d33e8b86e3dc169a982330f890fc7d30
-
SHA1
0a041b2c4672ad89ecc1ed8e40e30bd6e16589e7
-
SHA256
a130ffaddb5abc3318ccd945d1d4b123c90f6a89563685340d242a9ba119921d
-
SHA512
16faba15abb0363d8078ebe708115777158bdc8b2ee14e5f3b98f64d5068cdf7765efe6ad5e25345a29cd925daba9dad3bd2db6ccf0c99f77ba047f0a7eeb829
-
SSDEEP
3072:hxyllq3pnwjaI91IiA+TfTgQNTcaQG1tqnvmhj6q22sz5ZfCV8YWCa3o:hxklq3pnSaIC+TrgQQlIjd2RdZmwC+o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d33e8b86e3dc169a982330f890fc7d30_JaffaCakes118
Files
-
d33e8b86e3dc169a982330f890fc7d30_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 173KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 735B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 34B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE