Static task
static1
Behavioral task
behavioral1
Sample
d42313890512d8a68cf7066e6358eb74_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d42313890512d8a68cf7066e6358eb74_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d42313890512d8a68cf7066e6358eb74_JaffaCakes118
-
Size
1.4MB
-
MD5
d42313890512d8a68cf7066e6358eb74
-
SHA1
f44c1a82a6811c311c948876bae596c6dfacc2aa
-
SHA256
482882f1d7463fb30bb2b58f35fe00cfd052d608aeef9a7df216fd8bd20028fd
-
SHA512
ee35aab6079f903e56f404a4e80003fe7adb3303b5422c5aa6e44a2c5db429884b84bcefe4cda94e333b52af7c2af4ef18aa1dc6e3c7055b2b9abf8c3cd0f02a
-
SSDEEP
24576:DVcvpec5e0mZf9Lpae4fIXFnouawb9tS/CoohD3m:DVcvpec5e0mZfiecSouawbz4CoohD3m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d42313890512d8a68cf7066e6358eb74_JaffaCakes118
Files
-
d42313890512d8a68cf7066e6358eb74_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 568KB - Virtual size: 568KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 379KB - Virtual size: 378KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bm6olccv Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hhi.jblo Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.i Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE