Static task
static1
Behavioral task
behavioral1
Sample
d49e435de58367ff0f68cebe64b3b170_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d49e435de58367ff0f68cebe64b3b170_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d49e435de58367ff0f68cebe64b3b170_JaffaCakes118
-
Size
51KB
-
MD5
d49e435de58367ff0f68cebe64b3b170
-
SHA1
8b1c06f4bd737faa3c1a1e19287f94d876898a11
-
SHA256
b8dafb5f90452672ca6b462bc5470b5bb1769366a5ddf801cf9aee7fd689684d
-
SHA512
d624753d1bc7f12428756203396a1e70aedc0729bde6a76c3164163a6edd461db0ad347f941fe62874aefe624990a9191d7308bfa892686b1020af649e32ef54
-
SSDEEP
768:OE10Afe2x5tJfqHAt8o3Eqxuha5AmxlSh/A8X5AygkXNpr9Vr8yVG:3P41o3ClmxlShY8X51gkXNprnr8yk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d49e435de58367ff0f68cebe64b3b170_JaffaCakes118
Files
-
d49e435de58367ff0f68cebe64b3b170_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.idata Size: 14KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE