Static task
static1
Behavioral task
behavioral1
Sample
d3a887a8c452abb7e82093bdf60af261_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d3a887a8c452abb7e82093bdf60af261_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d3a887a8c452abb7e82093bdf60af261_JaffaCakes118
-
Size
275KB
-
MD5
d3a887a8c452abb7e82093bdf60af261
-
SHA1
f34156a253100b02bd8b9122434237bee3bcab40
-
SHA256
fed0bf35bba632193c669f9547539b87dbdfb3857af9b498b776949edbe4741f
-
SHA512
d2707d1dc2a8b27e7bf609b559b913ee996a2c57dfee79c6f2c895345cc48765027be9c2c18c6ad0bd0867df1aa7ab56e4e92ec800ef74d55a86db85e7044476
-
SSDEEP
6144:DGUxLGedA3U3a2ekplkGwW5VSKGSPUpPqUlnvc/ksAsaQfJ1md00oSu:qUxLrdOTY/wWrSQMpPqUlUMsAsaMgoS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3a887a8c452abb7e82093bdf60af261_JaffaCakes118
Files
-
d3a887a8c452abb7e82093bdf60af261_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
W G`76\e Size: - Virtual size: 488KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
x?v_Xc[y Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SLJpAApc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
SLJpAApc
-
x?v_Xc[y