Static task
static1
Behavioral task
behavioral1
Sample
db6ed34efb13e1cfd0cb7a041f917e53_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db6ed34efb13e1cfd0cb7a041f917e53_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
db6ed34efb13e1cfd0cb7a041f917e53_JaffaCakes118
-
Size
508KB
-
MD5
db6ed34efb13e1cfd0cb7a041f917e53
-
SHA1
57e3652c03df882c2bcd7878e444860a3e7c6885
-
SHA256
b0d6d1aafbb04aeec619c23433877396e37fa746baba19dcc55460fcab756ea4
-
SHA512
17e23e95dbc8db8c5f3f32dff5196ab992d082f1b30a390472522d1c879264d9c4610f054ebb698aecb7415802445bf227242f5a63e6584da22ec707026e3dda
-
SSDEEP
12288:bjKs0lj9QxaeiV6buRenJNPdR6kyUgd6y:XueiuPdR9O8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db6ed34efb13e1cfd0cb7a041f917e53_JaffaCakes118
Files
-
db6ed34efb13e1cfd0cb7a041f917e53_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 371KB - Virtual size: 371KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ