Static task
static1
Behavioral task
behavioral1
Sample
d3643d84acdac821f2b36c1697ce8d36_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d3643d84acdac821f2b36c1697ce8d36_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d3643d84acdac821f2b36c1697ce8d36_JaffaCakes118
-
Size
280KB
-
MD5
d3643d84acdac821f2b36c1697ce8d36
-
SHA1
4fde5b96bea2d0ff0d2e308f475ad82c796c676d
-
SHA256
dc3f6a4d3e2ac03ac375a1ed56187f15fa291a51f4827e48991208fd52ed45e0
-
SHA512
87da5ab10fc884668cf9619bda78cd418c21488ece602e0ca3cbb20dadc0a67264e6bf88129247e43ddaa436dc164c6e4ceae0c65f3f4614168ffb2a7bfdc405
-
SSDEEP
6144:61dlZro5YtBN+QvTLhAxCXFI9euwF6bOfi/V8krESR3eC:61dlZo5Yt2xCOFggV8mESBt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3643d84acdac821f2b36c1697ce8d36_JaffaCakes118
Files
-
d3643d84acdac821f2b36c1697ce8d36_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ