Static task
static1
Behavioral task
behavioral1
Sample
d3952b21678f62805c18e7782b9750a4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d3952b21678f62805c18e7782b9750a4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d3952b21678f62805c18e7782b9750a4_JaffaCakes118
-
Size
280KB
-
MD5
d3952b21678f62805c18e7782b9750a4
-
SHA1
102c0d22fd0ce99162f2ea914aedf3eccab2d9e1
-
SHA256
a0104ec936018f06435381efaff0c42ade9da9dfff61b54414d50f7adbf60db2
-
SHA512
d5e77c8f2a37ecfe5cc52040399b566bb1bcf8cbdaf41246c0dd133425ae1be54dfb563776c98d6cc83274ecc436e733721d77787cbfd3f6c0fd893aa6f6e49a
-
SSDEEP
6144:qNhqDjPEni8hSUyIBG7sxKBxfelv8Yl8irvmA6ip26VL9ejkllcmQV01qZgMQump:QhGrEniEvm9Sa0aRz6mHGZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3952b21678f62805c18e7782b9750a4_JaffaCakes118
Files
-
d3952b21678f62805c18e7782b9750a4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
mp Size: 87B - Virtual size: 87B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE