Static task
static1
Behavioral task
behavioral1
Sample
d988e98e16c18f8b51162f8e1ae29791_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d988e98e16c18f8b51162f8e1ae29791_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d988e98e16c18f8b51162f8e1ae29791_JaffaCakes118
-
Size
398KB
-
MD5
d988e98e16c18f8b51162f8e1ae29791
-
SHA1
919729fdc20b5f0aed687f844414a5af27946f83
-
SHA256
b5de32ec2e8793c6290c663b5d7942fa12e4d579449c8ae925d0c356ca3840d4
-
SHA512
728ca57dab2656055e02a508a6b337823583a8999c513c028dc743cc439bf5108696f273d44141cd04c83f24311754dcf5999c7de4a87a8563ec85ac244c1882
-
SSDEEP
12288:5DRD0WfvTOUfCTCZMLY4x0QJ8Fb1QpNbPV:590WfvyTC69+Q3pNbP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d988e98e16c18f8b51162f8e1ae29791_JaffaCakes118
Files
-
d988e98e16c18f8b51162f8e1ae29791_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
N�TS!Y> Size: - Virtual size: 288KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�Ns/e�D Size: 392KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE