Static task
static1
Behavioral task
behavioral1
Sample
d753c1668f252343a947d7aaa44f8929_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d753c1668f252343a947d7aaa44f8929_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d753c1668f252343a947d7aaa44f8929_JaffaCakes118
-
Size
77KB
-
MD5
d753c1668f252343a947d7aaa44f8929
-
SHA1
d89563a74bc58acf59edf73fea8820a0bd630013
-
SHA256
c889115e51ca161a7975e829893f637b198e171fb21d67315458f0b96af53700
-
SHA512
cad20ecaa8d9a3844f0bffc5bdd07627222a55d49087b3321321cdb83b62ef68343b48ae2eb2c08d6a9153d8df3deb79612829b174057212485bdc6e6ec16ba2
-
SSDEEP
1536:yLaYeMA2CNkm0XU4ZX4eFuZwaR4mm2ntGwizYXgTO3Fo:vMA5kPXwEGGm7tVdGOVo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d753c1668f252343a947d7aaa44f8929_JaffaCakes118
Files
-
d753c1668f252343a947d7aaa44f8929_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 228B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 590B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 65KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE