Static task
static1
Behavioral task
behavioral1
Sample
d401ffa0078207bd2c5f89d97131514b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d401ffa0078207bd2c5f89d97131514b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d401ffa0078207bd2c5f89d97131514b_JaffaCakes118
-
Size
316KB
-
MD5
d401ffa0078207bd2c5f89d97131514b
-
SHA1
1ba1cd4f6676cc373d50490ff7578491c6778fa9
-
SHA256
073ab05c5332a200084dfeaf2f9851a61ed9f514b3681faf778532f31aa0e7ca
-
SHA512
1829830f08bd472d674e2dcf4199fe209e72d1b2fbec22429abffd4b1ea5fe2fea0f1e6bf75cb024d193289f62ddbf1821af155da280efecc2b7b0376e237630
-
SSDEEP
6144:OuzwZXoTPcnS0b9VqwciMwbr6IQJh5URGWHcy0DV5t7gAHL9txnwCjrc5O1AUwRD:Ou0FoXHA0o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d401ffa0078207bd2c5f89d97131514b_JaffaCakes118
Files
-
d401ffa0078207bd2c5f89d97131514b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
SVKP Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SVKP Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE