Static task
static1
Behavioral task
behavioral1
Sample
d3d6e2562be6783251b9c44b8e345134_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d3d6e2562be6783251b9c44b8e345134_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d3d6e2562be6783251b9c44b8e345134_JaffaCakes118
-
Size
343KB
-
MD5
d3d6e2562be6783251b9c44b8e345134
-
SHA1
c4fbf71ad31716cbdf58529342a57d95133cf95b
-
SHA256
fafa6be42dde2f8c85c241c08213f0e42ba313ea89d00ceb3965298b57e799c1
-
SHA512
cb7776d266d676f4fbfadddc0a800513fd8ee4a5cdd204766d946122cc26c0592c9bf636a5f9c38b46a0663eb0dfb65980aee00f4fc5dc403f940a4e40e2ff8d
-
SSDEEP
6144:p8NcJUiv9okz2mNHgBkuNxsWD7gXrh2hGYxUru:p6ivNz5HIkU7Ds4kKUS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3d6e2562be6783251b9c44b8e345134_JaffaCakes118
Files
-
d3d6e2562be6783251b9c44b8e345134_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 340KB - Virtual size: 340KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ