Static task
static1
Behavioral task
behavioral1
Sample
d3afdb146765ae800c335d19113aae19_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d3afdb146765ae800c335d19113aae19_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d3afdb146765ae800c335d19113aae19_JaffaCakes118
-
Size
7.7MB
-
MD5
d3afdb146765ae800c335d19113aae19
-
SHA1
f184b483db7e5c8c557fc02f84a544ae8b56b764
-
SHA256
b1285d8b53786fcfe32c9445d9a3662aec58ccfa281de7cb3a745f71e5189994
-
SHA512
f292d46db83a48206ee5316e004657a759a9e571c5d9234cd1a81faae18c5de271b92f510ac6163a2c80d6b4f2b862ff674d95b1fda11b6d10c70d4fce56bba5
-
SSDEEP
98304:gBNFuOuQZw+qxBJHlG4Ow1my8DRd1df1r0LJuKEY7ddP4:gTuQZmBF89df1rSJHBy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3afdb146765ae800c335d19113aae19_JaffaCakes118
Files
-
d3afdb146765ae800c335d19113aae19_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6.4MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 172KB - Virtual size: 621KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ