Static task
static1
Behavioral task
behavioral1
Sample
d705d9e4a2bbd29e9c740d25b6fdf935_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d705d9e4a2bbd29e9c740d25b6fdf935_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d705d9e4a2bbd29e9c740d25b6fdf935_JaffaCakes118
-
Size
40KB
-
MD5
d705d9e4a2bbd29e9c740d25b6fdf935
-
SHA1
151d0f56adacbd47913be7d9effbe744f7ea6be6
-
SHA256
304fffbd574b449ca763f4d2a764ed83c10c7897111d503d1bf4a9347586b559
-
SHA512
c13fc55450378a52b3d885eab8a09cb856c993973db0b241dc55a30ff4c429d27287860bc519e105a8284f7095b9274ea2d7a549436e1e255272a38a3cb7c378
-
SSDEEP
768:v4B2JGYVNfV6vrFDPwp2Gt7YHN0m5vcdXwPXDzHvzExAPOE/3MwVrJ7H8oWXRrKn:vC2oAfIrJwp2Gium5vcxwPzzvzEx6L/h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d705d9e4a2bbd29e9c740d25b6fdf935_JaffaCakes118
Files
-
d705d9e4a2bbd29e9c740d25b6fdf935_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE