Static task
static1
Behavioral task
behavioral1
Sample
d3ca2c3aa2ff2b5c3f25e85e2697e973_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d3ca2c3aa2ff2b5c3f25e85e2697e973_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d3ca2c3aa2ff2b5c3f25e85e2697e973_JaffaCakes118
-
Size
949KB
-
MD5
d3ca2c3aa2ff2b5c3f25e85e2697e973
-
SHA1
2ce62044b70e5d227129410eddb3eba3f472a117
-
SHA256
b075e7da5354ad485a4fe1873de1e2a7e45f2e8d68a8d52ff96c55cd2f831724
-
SHA512
646b154c33fe53e6f4e41eafd94f078972415b41d359c55c79a51a40c47d21c97da3b0f5311b96d0c18633c0da99676eb40714d52fd402308010c14ae36bc03a
-
SSDEEP
24576:DV52tBJcf4d8MzLpuZVdAYhDybYpZ/+Kydp+aZaprt:DVycfanYV3T6aprt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3ca2c3aa2ff2b5c3f25e85e2697e973_JaffaCakes118
Files
-
d3ca2c3aa2ff2b5c3f25e85e2697e973_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 324KB - Virtual size: 716KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4343 Size: 590KB - Virtual size: 592KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE