Static task
static1
Behavioral task
behavioral1
Sample
db5e4501b7490e8132bed63913f8c71f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
db5e4501b7490e8132bed63913f8c71f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
db5e4501b7490e8132bed63913f8c71f_JaffaCakes118
-
Size
285KB
-
MD5
db5e4501b7490e8132bed63913f8c71f
-
SHA1
055d75c740e1ea19f6bcd463b4e0a69bda9d125a
-
SHA256
0e093725c205cccda02131e7c1c31d942ffcfa6cb31c563b31c5b00c129559f9
-
SHA512
7249c70cabcf78920a8a5217662a0bf6d41e0847d392ad9756507404c0c4167d3f79de8132c189a4fc7a241b91e0707e610f53df4fa639188e549226df6ec499
-
SSDEEP
6144:OY94NnuEXVUoz1XAddFUIBhJYhSN/YiG9O978M2Tn7f9ohSnz8:l9OKe1QnBnZNQiGEJYtohQz8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db5e4501b7490e8132bed63913f8c71f_JaffaCakes118
Files
-
db5e4501b7490e8132bed63913f8c71f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ