Static task
static1
Behavioral task
behavioral1
Sample
d4110a9fae517abbabb4ffd47156226d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d4110a9fae517abbabb4ffd47156226d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d4110a9fae517abbabb4ffd47156226d_JaffaCakes118
-
Size
51KB
-
MD5
d4110a9fae517abbabb4ffd47156226d
-
SHA1
0b274b182a7519347f046f8b323e76307049138f
-
SHA256
2d5825c83682eaf94a8efb6fcd8c17046131ae73fcdd76bff684df5edd219320
-
SHA512
f573143c4e2a587ef19f63e0b7b8cd1e378bdf0404775475c8d64680e76cbbef18092fe621b1cb6ab8c959be023790718cdd2e862168989a3814c389823d2ee6
-
SSDEEP
768:mr+lsaj/qyHz/JA2XXsrWk9mNctX2H180ajTipZnz:zls0JTnsrWemmcH180aXEZnz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4110a9fae517abbabb4ffd47156226d_JaffaCakes118
Files
-
d4110a9fae517abbabb4ffd47156226d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
DiDUBA Size: - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TiDUBA Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE