Static task
static1
Behavioral task
behavioral1
Sample
d653cfd3c1cd5e9e75f2e99399b3ec98_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d653cfd3c1cd5e9e75f2e99399b3ec98_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d653cfd3c1cd5e9e75f2e99399b3ec98_JaffaCakes118
-
Size
2.1MB
-
MD5
d653cfd3c1cd5e9e75f2e99399b3ec98
-
SHA1
23ebd947327dff040e9444b154e55aa6e6f3f616
-
SHA256
0afa3edf1a282144e41c2b12e952a8612d4eaeeb7503c45733927442e08b1dc0
-
SHA512
1ba81fcda2a65f63ab5286309365bbdec4a20c1a950eed8bf432035a017ac30e178eb38460deffcd237fab8a24d15dc11faeaef08aa885f26c019d432909f120
-
SSDEEP
49152:BXHGhvTP8lqJJdBRA//9bY6J4hfOavp+CdiV4qu:BMglqlA/26JHavp+Cdiu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d653cfd3c1cd5e9e75f2e99399b3ec98_JaffaCakes118
Files
-
d653cfd3c1cd5e9e75f2e99399b3ec98_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 1.9MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 199KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE