Static task
static1
Behavioral task
behavioral1
Sample
d3ca9402e069d5bf4161b42036ae2a68_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d3ca9402e069d5bf4161b42036ae2a68_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d3ca9402e069d5bf4161b42036ae2a68_JaffaCakes118
-
Size
439KB
-
MD5
d3ca9402e069d5bf4161b42036ae2a68
-
SHA1
5e56e11c0d954e264f8e9e2060d9a21297d52d9a
-
SHA256
1c373ab2e08e662d03936f17a0848d2e9d6e576bd9c0802a1ca901675660b526
-
SHA512
b8b48bb6da1f3deb1445d0ee67f357f858f37c8563efba36356aefa98b66f98c5261f571f0e4cb87327912dbb24b8135a54c147e3a90fe4cd1f46ea56c738dd4
-
SSDEEP
6144:NwYdLDMGqHS1qZVeJJxXMFYu83jfxJAFRXJSBn9ted8pp/db5L8b5:Ncby1Uk+Cn3jJJsJYnXub5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3ca9402e069d5bf4161b42036ae2a68_JaffaCakes118
Files
-
d3ca9402e069d5bf4161b42036ae2a68_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 264KB - Virtual size: 261KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rlp Size: 15KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE