Static task
static1
Behavioral task
behavioral1
Sample
d38652c76a47b9f34201c5bba63d2186_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d38652c76a47b9f34201c5bba63d2186_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d38652c76a47b9f34201c5bba63d2186_JaffaCakes118
-
Size
275KB
-
MD5
d38652c76a47b9f34201c5bba63d2186
-
SHA1
59aaaf6784fdc90bae51df73ef576a552e85f884
-
SHA256
f48cf825f2bd8d4cb0cbc831c932ed690d42e3147c5a01f461bab076af62738c
-
SHA512
4290bb6f320e93f2664fe43fd97bb6dd095b5a31edf6b4513432dc6f33513607c0570663138cd0872950901dc35c21c0616c4fd628527394e7ff241758c8ba51
-
SSDEEP
6144:T1zD8VxzcPN871ooSGIM4+HzXUdLZxTdeIzmJBbmWTEu6X+:h83C871PLIf+IdLZxpeIzsbmW4u6X+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d38652c76a47b9f34201c5bba63d2186_JaffaCakes118
Files
-
d38652c76a47b9f34201c5bba63d2186_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 183KB - Virtual size: 400KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ