Static task
static1
Behavioral task
behavioral1
Sample
d60d16fd7191939f54f0ff62afb3a7f0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d60d16fd7191939f54f0ff62afb3a7f0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d60d16fd7191939f54f0ff62afb3a7f0_JaffaCakes118
-
Size
84KB
-
MD5
d60d16fd7191939f54f0ff62afb3a7f0
-
SHA1
b8c1da5f8f2ea9804f1a7ed9ae9a0bda84a79401
-
SHA256
de8c6c8cbd4ae6c181e48b5817431f4fe97a50f2df7edc6b4afff8ee1710aca1
-
SHA512
faefcb45f787d603a30f9cebff792691275a05d4a4b75eb01613408e8473ee7206645f309708083641505d82ec82abc9d3ccaff43d204654e9400c3e94d3bd9a
-
SSDEEP
768:p6EpprRFis1m3/mlBwyKzXRzvdS4bHfcrRKMvEWKShvey0UwpCjRoWU3eX7I:Zp+3elB6lz9D0RlvE4Gy4tWFI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d60d16fd7191939f54f0ff62afb3a7f0_JaffaCakes118
Files
-
d60d16fd7191939f54f0ff62afb3a7f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.0000 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.00000 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.0000 Size: 436B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.0000 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
0000 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newIID Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newIID Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE