Static task
static1
Behavioral task
behavioral1
Sample
d3de86ee7cbb32d1fdacaf4a0c7e5dec_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d3de86ee7cbb32d1fdacaf4a0c7e5dec_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d3de86ee7cbb32d1fdacaf4a0c7e5dec_JaffaCakes118
-
Size
430KB
-
MD5
d3de86ee7cbb32d1fdacaf4a0c7e5dec
-
SHA1
9a9282192e89cba85eab43db006190b18a942199
-
SHA256
f31c529a555b65638eee1e4d0c2cfed31a0b7c4ba0c4dde9a401dacc2428f14b
-
SHA512
fb857afe20bccd44ef469e4fe34dd1e29ee9281213716461ae416bdd7e499d5773acc00b29e3dc6e0ca10622178f99a0700b65f7d730cb3e6bc82916f37eb2e5
-
SSDEEP
6144:F3cVrqijJ8BnxF2idZecnl20lHRxp3givbLNoGWBhEGW623KlUKlSLiY+mbY2:tRid8lLF3Z4mxxPPc7bWVKlUKlSmY+z2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3de86ee7cbb32d1fdacaf4a0c7e5dec_JaffaCakes118
Files
-
d3de86ee7cbb32d1fdacaf4a0c7e5dec_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 14KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 338KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE