Static task
static1
Behavioral task
behavioral1
Sample
d751588399883cda7df9aa8e7842253d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d751588399883cda7df9aa8e7842253d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d751588399883cda7df9aa8e7842253d_JaffaCakes118
-
Size
994KB
-
MD5
d751588399883cda7df9aa8e7842253d
-
SHA1
9a1dd2fcf6beb8f6918c1d6f32c56e4fdfe6479f
-
SHA256
4dc566a633703586ba2eea34670827b9dc13f34e67c0a8f5039f8f24b43fabd5
-
SHA512
fb9fc38d8d75be9ec3575be7dc5a1f74511b8c84ad18512162eff0e47f85e0201d9a6fc500b41e3ea2df49b8632d918f787dbeb2bf33b008045706bbb322e8d2
-
SSDEEP
24576:3vKxjxJayZVJAyrnz0+A0Uo4o2S99RBHMsK14lnLf/C:3CVJmThrS9HBHMsK14lnLfK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d751588399883cda7df9aa8e7842253d_JaffaCakes118
Files
-
d751588399883cda7df9aa8e7842253d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
3LLixQqu Size: - Virtual size: 516KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TnNl1tmU Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
J0c56Oj6 Size: 624KB - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
uzaxeufL Size: 677B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VAHY0YRC Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SMoKvw9S Size: 363KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PzqEz5Ed Size: 28B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ