Static task
static1
Behavioral task
behavioral1
Sample
d5e00798dd5103544f58f7dd3c8fed44_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d5e00798dd5103544f58f7dd3c8fed44_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d5e00798dd5103544f58f7dd3c8fed44_JaffaCakes118
-
Size
200KB
-
MD5
d5e00798dd5103544f58f7dd3c8fed44
-
SHA1
bb91d22e335559a2d1ba9694399196e85673b897
-
SHA256
e8409b612fd2bb2071c20c140b3b7366dd468225c1f2e3401b1457291ab0e59a
-
SHA512
9e803dd1acd4ffa1cb216fb39560c761b62505d54293465136e3a5e3ed9e1a19720e6e8c8e102f0294f522a305c9a5c9054297a17e8b26b714e991033421e516
-
SSDEEP
3072:iPecqdev9cdMHIJM86xZq8UQCjSpcFivIL6mcb:ihyDVgUjSCkQuma
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5e00798dd5103544f58f7dd3c8fed44_JaffaCakes118
Files
-
d5e00798dd5103544f58f7dd3c8fed44_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.scpack Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ