Static task
static1
Behavioral task
behavioral1
Sample
d500d345b91ca970eef251ae4b7073a6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d500d345b91ca970eef251ae4b7073a6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d500d345b91ca970eef251ae4b7073a6_JaffaCakes118
-
Size
977KB
-
MD5
d500d345b91ca970eef251ae4b7073a6
-
SHA1
8eb63f11c2ba47aab23080caebe2307dc8c8b282
-
SHA256
15599140cd41a54f04b5b369a4b7bfb7bbd018aca28397c1245c91b5cef186d6
-
SHA512
ff57c274d330b38589ffe6010b1d2ee4c71029a204a75b9ba562b50cf531ad81964e163f6f71353fa988d7f0eb02fa87bbff9c8c05e635c3c9624a3612f7ff13
-
SSDEEP
24576:rlFAuJQQ8VHKf1kph3pBul0uCPGax+XFw3XHdq:5XJQ21kp575HPGaMWn0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d500d345b91ca970eef251ae4b7073a6_JaffaCakes118
Files
-
d500d345b91ca970eef251ae4b7073a6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 5.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE