Static task
static1
Behavioral task
behavioral1
Sample
d98d91fda33010b1a3970a8c7bfdeb22_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d98d91fda33010b1a3970a8c7bfdeb22_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d98d91fda33010b1a3970a8c7bfdeb22_JaffaCakes118
-
Size
35KB
-
MD5
d98d91fda33010b1a3970a8c7bfdeb22
-
SHA1
f23e4132ebe742409ae94d9baf5d2d2d7c1e8076
-
SHA256
17dd5f393c5746b2a0919535d64e45ae04696e4b2958f092b4c34876e463a0a2
-
SHA512
728d73de1c4bbfe55149936c5b05b037851dd08e4885c973300b1da3cfdd750be7f8abe2789a4acacda35d7f2edfbfbe6b8da89e7fd893aed74bf41126146f11
-
SSDEEP
768:xXspC2+aOMpz5me9/LNcYk6iurIkEcQapxwDbQIS25S4o:xXspC/Mp9LNc0iurnKBnE253o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d98d91fda33010b1a3970a8c7bfdeb22_JaffaCakes118
Files
-
d98d91fda33010b1a3970a8c7bfdeb22_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
sCdF Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sCdF Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE