Static task
static1
Behavioral task
behavioral1
Sample
d6bc3205245cfdcc84cf992819b24d7e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d6bc3205245cfdcc84cf992819b24d7e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d6bc3205245cfdcc84cf992819b24d7e_JaffaCakes118
-
Size
82KB
-
MD5
d6bc3205245cfdcc84cf992819b24d7e
-
SHA1
eda44a381a07a8527dc7c6ca1a8ca5910bad0d05
-
SHA256
9050fc94dc20a87825b9e6366fc63f63612eae1c845fb263dcb4811f01b7fac4
-
SHA512
5166ca55b2e47d36a03577b4163ec932ed809edb3d79a438edc31fef99d0e67e084aaa4030156756ef5e2e5c5acf7221bcc6ea0f4a4e2437cefce894106ddb41
-
SSDEEP
1536:SAtqhZurh9DK67KbsfCLpjdT6dmxWVQoez8G8rmM8r:SD2266L7Ymxt+rQr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6bc3205245cfdcc84cf992819b24d7e_JaffaCakes118
Files
-
d6bc3205245cfdcc84cf992819b24d7e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
BitArts Size: 6KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE