Static task
static1
Behavioral task
behavioral1
Sample
d506b38b3dcf68dc3753935d37ee3f3c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d506b38b3dcf68dc3753935d37ee3f3c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d506b38b3dcf68dc3753935d37ee3f3c_JaffaCakes118
-
Size
78KB
-
MD5
d506b38b3dcf68dc3753935d37ee3f3c
-
SHA1
cc951e91aafeaf013501347d4eabffa668ce70e7
-
SHA256
c59fdd5da2f8bc28598a9698829ebfc7ac8c7a6b01dde191c04545796d67938d
-
SHA512
ee6b304e7ded43488de913d01b01365f480f6b5ae2479703bc3e5ae1ac0587af5ba18f2bdc1d68f4c46d841dacb9d19440227d564ddd396e1731c1926c63b8fd
-
SSDEEP
1536:UsOmRlE9xiaj+R5iBGxTYsb2T5HhdCC2KmXr0psfwz5drHw7DpQUA:UsOmRlE9x3+XDxTYsqvdCCMb0ps4dGK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d506b38b3dcf68dc3753935d37ee3f3c_JaffaCakes118
Files
-
d506b38b3dcf68dc3753935d37ee3f3c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Test Size: 100B - Virtual size: 100B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE