Static task
static1
Behavioral task
behavioral1
Sample
d3dbc4fe1db25c0c22ec2d5d3b74fe8b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d3dbc4fe1db25c0c22ec2d5d3b74fe8b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d3dbc4fe1db25c0c22ec2d5d3b74fe8b_JaffaCakes118
-
Size
657KB
-
MD5
d3dbc4fe1db25c0c22ec2d5d3b74fe8b
-
SHA1
2af9122375af3064da7092bbcdcc0ae6a1689904
-
SHA256
95566b889e22cf2f2ce57b85b222fe50cde2728bb4188b70ede917bab62976a9
-
SHA512
dd4b65b3e6518c116b7e831d270ae00523c61fae3e4f429ce26947f81bb339bae33fae145f7f726db4b589e7d0502d7f0b489e3247cbbd444e050548f6ecbb29
-
SSDEEP
12288:jeuHnWgyrgVu4rPy37WzH0A6uaF4Ad7dNsVN1qRqhD1fxpX:6uHcrgVxrPy37WzH0A6uwpd7QN1DJfx1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3dbc4fe1db25c0c22ec2d5d3b74fe8b_JaffaCakes118
Files
-
d3dbc4fe1db25c0c22ec2d5d3b74fe8b_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 556KB - Virtual size: 556KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE