Static task
static1
Behavioral task
behavioral1
Sample
d4d91a3a1955e1b862e5783150c0ea3d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d4d91a3a1955e1b862e5783150c0ea3d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d4d91a3a1955e1b862e5783150c0ea3d_JaffaCakes118
-
Size
441KB
-
MD5
d4d91a3a1955e1b862e5783150c0ea3d
-
SHA1
3a2ba388acba32f9ba1268fa3d5aef2a1741756a
-
SHA256
2609567eff9f3878f40afc3ead8e998426ae197acea39e0b2e44dc67e6b2bf05
-
SHA512
ef11d59a5e6aa3fa745ffda8d6c429a0dd0e64d8fe866f9910859ab4f6133972283e3f977811bc1df5b331d9155ec3208f08e3a6a71d52e43d13208859e49471
-
SSDEEP
6144:WUpvt+raBBzrFwksBZ6zfZzF82aZMfcQcK0WYpMMtjys7kI+YzHMtl:WUpvIrazfFveKfZzF8lZv9z1X7kTl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4d91a3a1955e1b862e5783150c0ea3d_JaffaCakes118
Files
-
d4d91a3a1955e1b862e5783150c0ea3d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 428KB - Virtual size: 426KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 940KB - Virtual size: 939KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 255KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ