Static task
static1
Behavioral task
behavioral1
Sample
d43655de621747a4a61cbe9fb08bf908_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d43655de621747a4a61cbe9fb08bf908_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d43655de621747a4a61cbe9fb08bf908_JaffaCakes118
-
Size
293KB
-
MD5
d43655de621747a4a61cbe9fb08bf908
-
SHA1
4c346a3b6015a8446099aea2a0420cac993856ec
-
SHA256
3e2caf195d71e1274549a1906579a4932772f39ef19d92c9dc6075c8265040b9
-
SHA512
a4f8a2cf573db0f5861c0ef270141c35b5ed14608f50a0f8d22c5abaef43f7fd8d39e29f26d2b0ba5a8d909e7f3daa6ec69cb93054cca60b5bfd1f11f7270925
-
SSDEEP
6144:l9Bf9+Jw/Va72CfpG8AkV1SJ8WGhInGif5RScN:h1+GVa72cGcVkIhgFfTSc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d43655de621747a4a61cbe9fb08bf908_JaffaCakes118
Files
-
d43655de621747a4a61cbe9fb08bf908_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.packed Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE