Static task
static1
Behavioral task
behavioral1
Sample
d618cf43603b92fed935e845c1be2d18_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d618cf43603b92fed935e845c1be2d18_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d618cf43603b92fed935e845c1be2d18_JaffaCakes118
-
Size
884KB
-
MD5
d618cf43603b92fed935e845c1be2d18
-
SHA1
3e0cb5f6cb6ed9de39257d547907a114a35b4a20
-
SHA256
cdb10f39ec2ec3e5f0d8504f663f867b554d3cc3f3e65be6b4504005f5adf8cf
-
SHA512
48b9dd4eb0737df1c8a9f0891e172851c990f74f84696a9d50c4d4d9528b40fbe0c59df134cca7bdd7d77c432ac3cd3bbf1861f74475f4459f639a91f0443f01
-
SSDEEP
6144:UZfec9EbXDk6Rk8KWnmy+g46nmy+g46nmy+g4OuHOtnmy+g46nmy+g46nmy+g4OO:UZWtI6RkgVV+OtVV+OtVVuv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d618cf43603b92fed935e845c1be2d18_JaffaCakes118
Files
-
d618cf43603b92fed935e845c1be2d18_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ