Static task
static1
Behavioral task
behavioral1
Sample
d478eaedc5eaa670c412a77bbf8edd0e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d478eaedc5eaa670c412a77bbf8edd0e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d478eaedc5eaa670c412a77bbf8edd0e_JaffaCakes118
-
Size
756KB
-
MD5
d478eaedc5eaa670c412a77bbf8edd0e
-
SHA1
1471a35e4f60e1c16e8be099b6e198302c913533
-
SHA256
c3bb4dacf549a5b98477d3420d56c048fd0841956c5004bc56b7468f23295a37
-
SHA512
0dd859c60ec793c1c22681b5239f991bbf668453ee796a25a4867b2c6ca43f1445c4d6e2b99bd07e6bc3618da04401999642c23ff6e33c42a65b25d8bb049439
-
SSDEEP
12288:yYMF6cPW//tBuNt/86KnJOb8po5MewVWHum1VucK4X6Dffe+sSEcls/p4JVAhwzR:yJ0c+HtAU6MvDeOshK4X6jfe+sSEEup1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d478eaedc5eaa670c412a77bbf8edd0e_JaffaCakes118
Files
-
d478eaedc5eaa670c412a77bbf8edd0e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 724KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yassine Size: 16KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE