Static task
static1
Behavioral task
behavioral1
Sample
d4d895e22ada8582fc3136b55c248ec0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d4d895e22ada8582fc3136b55c248ec0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d4d895e22ada8582fc3136b55c248ec0_JaffaCakes118
-
Size
42KB
-
MD5
d4d895e22ada8582fc3136b55c248ec0
-
SHA1
82e685a69bc2b47cf6777396aa47a773ed63151d
-
SHA256
404151c5fed236ddcf7d3a344cf82ae5df6416550816cf9da83deea074c27656
-
SHA512
8b04e6dd174387b2568e2fd2a1efd964adb98c1a2f6d19cbe06466eb1e190d50bd4758d1abe383cafce15d5510bba6a415b352a9b9bf44cbb9fc0d9bae0c6c62
-
SSDEEP
768:s2FycN9Dq2YurUPewuQ1z6l9ppN07Y3o8hmCc38vJzSjmEdq5fjCJEWcQnxqPUM:s2HN5WCQ9K9ppN0CZK3KKm7oNxC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4d895e22ada8582fc3136b55c248ec0_JaffaCakes118
Files
-
d4d895e22ada8582fc3136b55c248ec0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
pack100 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pack101 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pack102 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pack100 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 528B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ