Static task
static1
Behavioral task
behavioral1
Sample
d43bef9217ebe4038426cf389a26d262_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d43bef9217ebe4038426cf389a26d262_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d43bef9217ebe4038426cf389a26d262_JaffaCakes118
-
Size
403KB
-
MD5
d43bef9217ebe4038426cf389a26d262
-
SHA1
c38fc760d8afa8d5949e516c7dc5fdd9d7b338fb
-
SHA256
af37f6f5aa455f76e4fb67f9179fe7eb75f078e418fa2e6fc1bd04d38d483ddf
-
SHA512
607ffd79f6c4aae8ad70e8c3b84ce9a467dda62cfd80eb6416ba7dc067c94356cc5fb0cb1c9a5279a9b27da9c9aa8074351cab9c145e5c877cb76d8d859cc079
-
SSDEEP
6144:7Nr4pZ/j3F2idZecnl20lHRxp3gHhU+27g1p7tPsReBtiMFyr18AQ8ZCWHgIZ:JM/j1F3Z4mxxgU/apPsRqtPFKblZRAo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d43bef9217ebe4038426cf389a26d262_JaffaCakes118
Files
-
d43bef9217ebe4038426cf389a26d262_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 15KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 333KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE