Static task
static1
Behavioral task
behavioral1
Sample
d62ab07c29700eacd26c7516f1a43f3c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d62ab07c29700eacd26c7516f1a43f3c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d62ab07c29700eacd26c7516f1a43f3c_JaffaCakes118
-
Size
603KB
-
MD5
d62ab07c29700eacd26c7516f1a43f3c
-
SHA1
bacc0ad2d89aa20b84c8e8e5d390167dd0190bca
-
SHA256
ee4aa63ab4f7936e980f40b2494398b5229ab7ed5490ed504fe86cc2ae73d418
-
SHA512
d4cbc0b2e6fa1b7e769c1b571d8b037d7eb441c88510730fc840eea68dc337f63e8e7ada727b0ed0530e1ea73142ba211e5b7d1863763bd6378f415aa1b5109a
-
SSDEEP
12288:oyAd4OKqQ5lbyZA5ogEWvhRpPYMjdyZMF3Z4mxxLrvI1nmEofI:oWORQ5RyZAHVpPVcSQmXHI1nh5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d62ab07c29700eacd26c7516f1a43f3c_JaffaCakes118
Files
-
d62ab07c29700eacd26c7516f1a43f3c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 280KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 312KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE