Static task
static1
Behavioral task
behavioral1
Sample
d6c908f4f20351bc01e22a8eb28f6bcf_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d6c908f4f20351bc01e22a8eb28f6bcf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d6c908f4f20351bc01e22a8eb28f6bcf_JaffaCakes118
-
Size
74KB
-
MD5
d6c908f4f20351bc01e22a8eb28f6bcf
-
SHA1
2fdc56235d528537de6549d93f39226d259a9bda
-
SHA256
51748350fd09f1d4ed79f837f00eb9dd144aaff557738c9e42398aa0179dc818
-
SHA512
ff4b70250614c6711631b6123aec7725da1c01e513c8337c3a9578d83a7d4738ed60a8ad67d7b255c5bfa81d2cdf5927ddcf144405c055d3ef228c3677158fdd
-
SSDEEP
1536:D+DX9Cre5POSBXtVAXexpX8AuOqoP7cbPSiF/X9zwJct:Mt7hb+UX8eqoPfEf9UO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6c908f4f20351bc01e22a8eb28f6bcf_JaffaCakes118
Files
-
d6c908f4f20351bc01e22a8eb28f6bcf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 236B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ