Static task
static1
Behavioral task
behavioral1
Sample
d6fc46870403af18f6502371e8b78969_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d6fc46870403af18f6502371e8b78969_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d6fc46870403af18f6502371e8b78969_JaffaCakes118
-
Size
557KB
-
MD5
d6fc46870403af18f6502371e8b78969
-
SHA1
b50d415d163304a5d5d5e872d735a475614f756e
-
SHA256
d0467ec110ce654f3e2ab45a3047a0ba441d5f68c417efb2879da2efca1ceb9c
-
SHA512
795983a4c72c81d44f34ff0bdc0a8936c1d8d568d6ccd9feaa2f4ee053a82a791614b8e4b2e04e562f3759a6123d4e44ee53bf585024c6a059c444d3a7e55786
-
SSDEEP
6144:KDLeZzJXLcQF65vRKeHo1kG1JFis7WvEPUuLZ8OJg2t/e:KDLeZFIp5ImGbqvEp8Om2F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6fc46870403af18f6502371e8b78969_JaffaCakes118
Files
-
d6fc46870403af18f6502371e8b78969_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
564yg5rg Size: 90KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dgd5w34v Size: 512B - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5tyd59gc Size: 111KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 350KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE