Static task
static1
Behavioral task
behavioral1
Sample
d481d6fa3b8823ea38f0f6b7a571fd43_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d481d6fa3b8823ea38f0f6b7a571fd43_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d481d6fa3b8823ea38f0f6b7a571fd43_JaffaCakes118
-
Size
58KB
-
MD5
d481d6fa3b8823ea38f0f6b7a571fd43
-
SHA1
ff4b307b5976165eeded885626c68761080b1738
-
SHA256
7e554e7ff5bfec3036e1e475b5f30bfc377a1f8afb9222c71405438f478e4d81
-
SHA512
b3ef03dd267ef55a25002031a4655450c0aed9c214991d5ca0b7719adb2c239fe3ba85bdc0c72455d988b7585c4c63999c4a3749198c5df363d0ef896749a277
-
SSDEEP
1536:62CgxS5YlV8M9qIfQ/uqcjNg6ZTdmver0YauyHXb49:6f15YluW7uCJmvK09Xb49
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d481d6fa3b8823ea38f0f6b7a571fd43_JaffaCakes118
Files
-
d481d6fa3b8823ea38f0f6b7a571fd43_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 58KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE