Static task
static1
Behavioral task
behavioral1
Sample
d603eb3fc20e089ce6fc0fe16a2191c7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d603eb3fc20e089ce6fc0fe16a2191c7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d603eb3fc20e089ce6fc0fe16a2191c7_JaffaCakes118
-
Size
1.2MB
-
MD5
d603eb3fc20e089ce6fc0fe16a2191c7
-
SHA1
4b1be8342ea0539487861dc723bc3ab591b17746
-
SHA256
bb7c07ed7dc7e6298041a6cc20bc962c306e0c9b34b46a774d7dc3f3cb92d0bc
-
SHA512
799f557cedbaf1b7a8343285c2c15ea64d34831cf37a0cb625979827e3bc11944a60d3a969118f71163eb79e7cedb3ccb2ce4c10cdb33955b8fdf10ce0a98bc6
-
SSDEEP
24576:UuhaL/erQZb+md4wmnJ/erQZb+md4wmnk:b2/erQZbd2zJ/erQZbd2zk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d603eb3fc20e089ce6fc0fe16a2191c7_JaffaCakes118
Files
-
d603eb3fc20e089ce6fc0fe16a2191c7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ