Static task
static1
Behavioral task
behavioral1
Sample
d4e021839bf66fbeb5975f147e3f92c0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d4e021839bf66fbeb5975f147e3f92c0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d4e021839bf66fbeb5975f147e3f92c0_JaffaCakes118
-
Size
355KB
-
MD5
d4e021839bf66fbeb5975f147e3f92c0
-
SHA1
dd98e2fdfcfd6f3674ebdb0f2764982b42540e6b
-
SHA256
d02fb5031ab128df5d8ab20e7c884315f1afdcb2d6aae3cac155776f2f338fff
-
SHA512
db2c591a39f6099d0f9d28564652cbdbd638cefd9a00cd541d177b2536037f5b59efd351f9477119b281e26bba223ed971e55779269924ce08706d71adc059ab
-
SSDEEP
6144:Ck3TpLbXeERfde+lb4BTJMs/J14MSEXtMVClwSKGdm1TgbtZrLwM0V4JdoS:/TpLTeEf5s4MSE2ClXKom1mtZHmMoS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4e021839bf66fbeb5975f147e3f92c0_JaffaCakes118
Files
-
d4e021839bf66fbeb5975f147e3f92c0_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
���0 Size: - Virtual size: 380KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���1 Size: 349KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE