Static task
static1
Behavioral task
behavioral1
Sample
d67a7de98361bc6c242a603667d3d962_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d67a7de98361bc6c242a603667d3d962_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d67a7de98361bc6c242a603667d3d962_JaffaCakes118
-
Size
193KB
-
MD5
d67a7de98361bc6c242a603667d3d962
-
SHA1
e9e725b914be13381695883c7ac84fbb2e2ec155
-
SHA256
865ec9e2d19b5b5eb32603fae42e3172b1d7b740c6051dd2d5de8dd37608ccc8
-
SHA512
85d12c53c2aeac7525c4a9978e94d77bc308af4267442695f4f31836e8cfd2bea339a2163844fc2eff5bd5fd1c7dea1cde780e2adb272cf3199eb639d6838aca
-
SSDEEP
3072:3j06OYx8977DlkX6zHewLzyd8seGKytD7W+LS0E/EfSaKfY7zuMlbfN/7wu5:3j0gx897uKzHewamHGLtnUs2Ym4bFzf5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d67a7de98361bc6c242a603667d3d962_JaffaCakes118
Files
-
d67a7de98361bc6c242a603667d3d962_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oli Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE