Static task
static1
Behavioral task
behavioral1
Sample
d5736d5ef9795a7cbc9a38f24d8dfecd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d5736d5ef9795a7cbc9a38f24d8dfecd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d5736d5ef9795a7cbc9a38f24d8dfecd_JaffaCakes118
-
Size
272KB
-
MD5
d5736d5ef9795a7cbc9a38f24d8dfecd
-
SHA1
d437ebbd369b616942b589e457f3a4605325b2d1
-
SHA256
3deb8c5dfc0ed0dce923e4f0c20d411acbf9dcf0667e00deb1e7594835d8afa1
-
SHA512
5c7ae45a6ecc4b939f69629369bce1dd8f0b72a0500ce62b914203ca8cf5b01e57874400b3cfaf6c0454a8a8688b7a7ad1fd96d7d4c0f1b61c21fc54f62483b6
-
SSDEEP
6144:76Vge3pLZL02vIM6JTYjL/9oXnuUEF9Gi2wre4SE:76Vge31OA9C8jL/yX/in2wre4S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5736d5ef9795a7cbc9a38f24d8dfecd_JaffaCakes118
Files
-
d5736d5ef9795a7cbc9a38f24d8dfecd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
5prfvuJX Size: - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PCQ9vDmA Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
SmjsYoxS Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KJy0Qp49 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6fupVSP9 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
6fupVSP9
-
KJy0Qp49
-
PCQ9vDmA
-
SmjsYoxS