Static task
static1
Behavioral task
behavioral1
Sample
d695632cc7895f1bc900fe0b0acac46e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d695632cc7895f1bc900fe0b0acac46e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d695632cc7895f1bc900fe0b0acac46e_JaffaCakes118
-
Size
80KB
-
MD5
d695632cc7895f1bc900fe0b0acac46e
-
SHA1
b73f24f15f6abd91e92145b23dcb40a4562966b8
-
SHA256
d0ff8014b0ed24964cfc31745562d0f77def82a77fe191ae73cbeeae1a5414ce
-
SHA512
dfe180206f76ecdf85f2714689d6bcb11ca2bc0e6ddcc12df3c9f3ad577ffef0655d670b2ab734fbcd77d55724a3e85f5cbe5e207e7fb324f2a6c1208cad3919
-
SSDEEP
768:WwDKrWXTp7YcqpmJOx2y9hYrbKj48QXf6U+9yyJol6kmv0sBvo7onpGVNFQPvng:WwGG02G6rv8Ks9mK8sVo7opGHQg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d695632cc7895f1bc900fe0b0acac46e_JaffaCakes118
Files
-
d695632cc7895f1bc900fe0b0acac46e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ