Static task
static1
Behavioral task
behavioral1
Sample
d6f30eec4d49e6d79bd17c02bf994c01_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d6f30eec4d49e6d79bd17c02bf994c01_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d6f30eec4d49e6d79bd17c02bf994c01_JaffaCakes118
-
Size
123KB
-
MD5
d6f30eec4d49e6d79bd17c02bf994c01
-
SHA1
6124f4782ddc9d029ba24fb160b4fd2bfa440494
-
SHA256
ffdba0a4202ce5cb6ff9ccef856032f6c55eeecf9f55233e84817f619385b8ac
-
SHA512
3fe2a10a9d795ca77a35901d08c008bbd32bd73409cda6caf5f13599f32e6ea3ee84442b4854b3cacf446fb75de8edd4b79b6020605eb7ec3bb89f766370d9a4
-
SSDEEP
3072:ahs4SI5fNNLhO4K6scwVZqfB4/2/s6Sk5wq/e0NCiYfzA/T6JY/:ahsLI5fN64K6scwVZq5Zvwq200pbA/TZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6f30eec4d49e6d79bd17c02bf994c01_JaffaCakes118
Files
-
d6f30eec4d49e6d79bd17c02bf994c01_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jdqlz$ Size: 1KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 923B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 3.0MB
.tss Size: - Virtual size: 432KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.debug Size: 119KB - Virtual size: 120KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE