Static task
static1
Behavioral task
behavioral1
Sample
d58832cb4ef89e54ec3ef783064a2be9_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d58832cb4ef89e54ec3ef783064a2be9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d58832cb4ef89e54ec3ef783064a2be9_JaffaCakes118
-
Size
113KB
-
MD5
d58832cb4ef89e54ec3ef783064a2be9
-
SHA1
a06e9ee1cb04785980e376d7ed9ee803f623e55c
-
SHA256
cad3c4b2324317fc8624073328508fd70afc90a5b134ddc50ca2ca8eeeb7fcb1
-
SHA512
e9b49f3de6b26270af1f48edc3acc232886c43515027b5ff637b68b1f603e19fe67b9b3e0921aec949ea6a8ecd664dcbf9e230dac3c8d004d7bc5c211fc97244
-
SSDEEP
1536:GLUTqKWBbRZrs9vS1YpHe9QmxCf15wDNp9Xf3xFlzsiOidXEOVwoiwC1YgidQ8j3:Kbd9Qzz+/DNsatEOSmLUwT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d58832cb4ef89e54ec3ef783064a2be9_JaffaCakes118
Files
-
d58832cb4ef89e54ec3ef783064a2be9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
8c Size: - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4yr Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
h4cxki25 Size: 674B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE