Static task
static1
Behavioral task
behavioral1
Sample
d5af91f9c985509e0bf874aa3c08f094_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d5af91f9c985509e0bf874aa3c08f094_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d5af91f9c985509e0bf874aa3c08f094_JaffaCakes118
-
Size
310KB
-
MD5
d5af91f9c985509e0bf874aa3c08f094
-
SHA1
ff6c37e15c9f92dde33212a1f6ab587e5b7fca03
-
SHA256
0899c98f9a17427680cb5eaaef00d6d11f0533ea3888aee9ade9b54b2eacb2d9
-
SHA512
0b3cb856a80b24d6950a3b55d8f56e711411e877b43c69ed257deb095de211f7fa9810b3dad585af44ffbc510123ba984a108a58ed048ddc2a8092aef3f7cf43
-
SSDEEP
6144:r0UZg5BP0lG4nC0tdNFFHewO9BG0dAeQSVY6CvVPB8pgdViFrLFqDBrsTTvptmXz:YUZUP0lG4vLNFM9BL1CvtB8brwDBoTT2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5af91f9c985509e0bf874aa3c08f094_JaffaCakes118
Files
-
d5af91f9c985509e0bf874aa3c08f094_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ