Static task
static1
Behavioral task
behavioral1
Sample
d405b3b06b5a0c06fbf28073f5d8b6e9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d405b3b06b5a0c06fbf28073f5d8b6e9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d405b3b06b5a0c06fbf28073f5d8b6e9_JaffaCakes118
-
Size
213KB
-
MD5
d405b3b06b5a0c06fbf28073f5d8b6e9
-
SHA1
05189a8ef182a1942e59d6b8b40832a731095143
-
SHA256
1531c3dce2108393339bc0e7bab01f189656d750e666782ba5a1df30a2c0d6e3
-
SHA512
e46f0264755e916ac104af711bfdafad7a73d3598d31b4a1ae7d4c4fa75f3bb73a9e2c57742bc32f7039c5bc8ddb68b349ad5b232cce39afe8c5a25dd20f41c1
-
SSDEEP
6144:I6ZmkWkr9eZX7RwlH2/8UcR10gwhOkknlCbIdryYkb6/:sBS9eZX9w2/8UcH0VhLknlCbIduYk8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d405b3b06b5a0c06fbf28073f5d8b6e9_JaffaCakes118
Files
-
d405b3b06b5a0c06fbf28073f5d8b6e9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 427KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE