Static task
static1
Behavioral task
behavioral1
Sample
d50bc19c2fb00ae0121ee27e80761f2e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d50bc19c2fb00ae0121ee27e80761f2e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d50bc19c2fb00ae0121ee27e80761f2e_JaffaCakes118
-
Size
81KB
-
MD5
d50bc19c2fb00ae0121ee27e80761f2e
-
SHA1
5aba811e43bd347beb51a81d0e1705948d8ca84a
-
SHA256
9b1af14a3e7a5d402879f9160091f80bfa136e699a0123c0a93ca99ffed18fec
-
SHA512
543e270f2075e0c2f8ba9135bc48e18b2df7bc15bdeecfb439c4e8a68d5d1bb423479622894eb8dc8d1d7fa3d8d3b75f799d8cc8cfedccc2907cd58b249a7626
-
SSDEEP
1536:q02QGiuS9kn1bz0RGSaP+r4EWS5DwYdzpubU04DM+wJBDJ6bsyVPblYdx:q0NOn1XYaW0G5PdCNNobsgTl8x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d50bc19c2fb00ae0121ee27e80761f2e_JaffaCakes118
Files
-
d50bc19c2fb00ae0121ee27e80761f2e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 296KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 80KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bbb Size: 100B - Virtual size: 100B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE