Static task
static1
Behavioral task
behavioral1
Sample
d6336ff44269550cb176e16c567a153c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d6336ff44269550cb176e16c567a153c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d6336ff44269550cb176e16c567a153c_JaffaCakes118
-
Size
523KB
-
MD5
d6336ff44269550cb176e16c567a153c
-
SHA1
8067253358f126e56aa55f3d6ae7c1931dbab9b1
-
SHA256
f3cabd8b240d6003da81e0ec5f1fb79d977ebd88b04f77fc4fdc05e59357d4b3
-
SHA512
473f65c83af693d48c7e3b945e8739d5b8018b26fb4532a83a62994bae67e97bbc69fd6aa2574d350ad26aefaa9c7ee523d9524431952e44d7296718cd01d580
-
SSDEEP
12288:bCg0bh7LkqUoteWN31gX8LVlL2SaILBgfl2lu:Og0pkqJNuXe32SZCUu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6336ff44269550cb176e16c567a153c_JaffaCakes118
Files
-
d6336ff44269550cb176e16c567a153c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 824KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 437KB - Virtual size: 440KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ESV Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE