Static task
static1
Behavioral task
behavioral1
Sample
d428b505992eaa6df59a4619ed0c9039_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d428b505992eaa6df59a4619ed0c9039_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d428b505992eaa6df59a4619ed0c9039_JaffaCakes118
-
Size
1.0MB
-
MD5
d428b505992eaa6df59a4619ed0c9039
-
SHA1
cf11ca285c6876b144f3d53d6b1ed895912da39f
-
SHA256
968fe5a73976c9fb6e8f7d24f3ffb967537f3fb2db33b87b0daaebc37aec09fc
-
SHA512
1c86d48ee6f39db079f371c90bf43a67a0d6f8d8e2cf6ef9665c49f05b3cad2b2c96c613eb64c2763611f8ab5a08ccf1beda4dd21c669d1a50d7ceb9b95b1b32
-
SSDEEP
24576:vxuE4o+V/QKX0y7i1JH5mPs5RJhoYI6cPgq7zRXEf43:vsE4o+1QKX7i3ZjOjPgq7zRX13
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d428b505992eaa6df59a4619ed0c9039_JaffaCakes118
Files
-
d428b505992eaa6df59a4619ed0c9039_JaffaCakes118.exe windows:4 windows x86 arch:x86
eee9062b8cbe1efb89c250150605b1a4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
FatalExit
Sections
CODE Size: 1009KB - Virtual size: 10.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ccp3p Size: 1KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE