Static task
static1
Behavioral task
behavioral1
Sample
d56c9395c8b59ce59e975d80cfe22ca7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d56c9395c8b59ce59e975d80cfe22ca7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d56c9395c8b59ce59e975d80cfe22ca7_JaffaCakes118
-
Size
14KB
-
MD5
d56c9395c8b59ce59e975d80cfe22ca7
-
SHA1
e080636dc8ea22163bb44a170d76d6012e007d3e
-
SHA256
6e1f7bcd6793c61c901da5832b147e8463eba21394f6a2ac8c798ff31603d535
-
SHA512
c7f3616d3934b4d6368087b6e26faa15db3e4ade9c797453e3a8e94fbe2f886f882c953804d0a117c10321562e4cfad96081192fbf67ebc1a8c5717f9dd3564c
-
SSDEEP
384:EJpGOuQPHNqSMKmoL98sduDPrtPob+IVLc5Hph:mpBHUSj9JduPKb+IVLgH/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d56c9395c8b59ce59e975d80cfe22ca7_JaffaCakes118
Files
-
d56c9395c8b59ce59e975d80cfe22ca7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
�CM0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�CM1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�CM2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE