Static task
static1
Behavioral task
behavioral1
Sample
db5a74ae070bb7a65b042a80821404c9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db5a74ae070bb7a65b042a80821404c9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
db5a74ae070bb7a65b042a80821404c9_JaffaCakes118
-
Size
448KB
-
MD5
db5a74ae070bb7a65b042a80821404c9
-
SHA1
0c74c12b38eb34abff6b94da6ad5eaca7b6ea761
-
SHA256
d5dca2d87dd961c286dc055ba7ca07c3f460fe7479e83cc78b530617e01a4fc0
-
SHA512
9069c51234d98d11975d91e5437f39199918d6b77a9a6b60bb57fd4eaffa3e5f901cddbfd12894bd04678e14060e37e6687eb1fd21d7337cc5acd7857cf968bc
-
SSDEEP
6144:wLOVqm65eq3I727hjugAiQaNTcVMQb0Cw7rMX2KIaJvWSlvO5SyLFhM5n:QOVqYqY7jMcnIA2KIaJvzlvkl/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db5a74ae070bb7a65b042a80821404c9_JaffaCakes118
Files
-
db5a74ae070bb7a65b042a80821404c9_JaffaCakes118.exe windows:5 windows x86 arch:x86
1fe1c949bdacda0dda5880ebab6a5d8c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32 kernel32
wsprintfA �Q�
Sections
.text Size: 28KB - Virtual size: 107.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 392KB - Virtual size: 392KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ