Static task
static1
Behavioral task
behavioral1
Sample
d3783d6b9ffaa2f440e4249b7d910867_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d3783d6b9ffaa2f440e4249b7d910867_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d3783d6b9ffaa2f440e4249b7d910867_JaffaCakes118
-
Size
138KB
-
MD5
d3783d6b9ffaa2f440e4249b7d910867
-
SHA1
bd69cb0a5c9705f0c6aeacb79bc52f6ec3803771
-
SHA256
3b69867aabd0912ec4d46c50f059d60fe8a541f4b18a0bca5eac711e921cb00b
-
SHA512
11f5589160af4f6817ccb23fca9c4e6e936c5e8fe8c3ad86314d7f5b8e33610350764bf8ed79e9f3134b5441b5b1b8b2accff03761be2014b0271fc1c5589efe
-
SSDEEP
3072:ZU3RZlnfF8xGdaegugZm4t1FEMxFFS+bJ4zsUCjNaR1VgBlFJfAYMout:EZlnfF8xWzgZDt15FF3N42jxlFJCoS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3783d6b9ffaa2f440e4249b7d910867_JaffaCakes118
Files
-
d3783d6b9ffaa2f440e4249b7d910867_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
p,PI)+n, Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wyc<'xVF Size: 137KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_i`$3,us Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE