Static task
static1
Behavioral task
behavioral1
Sample
d3b231ee3a5102126c648b62cda99d69_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d3b231ee3a5102126c648b62cda99d69_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d3b231ee3a5102126c648b62cda99d69_JaffaCakes118
-
Size
30KB
-
MD5
d3b231ee3a5102126c648b62cda99d69
-
SHA1
259abc026b6dbaaadecbd02674f4db8a798e32ae
-
SHA256
84e848e12a6c34f9c435dbe22c7259597ecf1153f38c2033a53169bf971b8f24
-
SHA512
369a7c5fa5d8bf8c3f75fa0396b4f2c3aa3c326ab5a8a2b1b3a854c1da51e830ac0a8b49ef2e87993148c0a306e69c2595833f13e1488023db67b26f73c54b40
-
SSDEEP
384:+6q5oYTYrH1NrJMjyQLQSRmlW6s/CyztQMx2Q71vK7Dl1VH/HPDAcksVhhP8tI+r:Bq5oTr5Dt0mV7LVPrhhcKdpX5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3b231ee3a5102126c648b62cda99d69_JaffaCakes118
Files
-
d3b231ee3a5102126c648b62cda99d69_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ