Static task
static1
Behavioral task
behavioral1
Sample
d35b9111728f17c5eb79a5c7f85dc74e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d35b9111728f17c5eb79a5c7f85dc74e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d35b9111728f17c5eb79a5c7f85dc74e_JaffaCakes118
-
Size
72KB
-
MD5
d35b9111728f17c5eb79a5c7f85dc74e
-
SHA1
7ca6bd486ff0d634ea81e5568d63b4e5d1190ba6
-
SHA256
9b780d72ae9729b9c08c2eb1adc05c6e4b9bce84c10ebc9df6db04d6c8e3e09a
-
SHA512
2134917a3fda0004407740a3abcbf63d3790d28126c00beeda467dc8440bfe6e449e3e7721910fdc4ab67049573cdf595303e5affcc6954dac9ab03cb966b943
-
SSDEEP
1536:w/+P0pJT3Xc01nNf42n6hKSaSr0wJj+uHd81Z0nKzUroRR:rP0pJrl1n6XNTNau981E1rof
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d35b9111728f17c5eb79a5c7f85dc74e_JaffaCakes118
Files
-
d35b9111728f17c5eb79a5c7f85dc74e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 38KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE