Static task
static1
Behavioral task
behavioral1
Sample
d9bbe88084b82dfa00dcdcf9d7ddf3fe_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d9bbe88084b82dfa00dcdcf9d7ddf3fe_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d9bbe88084b82dfa00dcdcf9d7ddf3fe_JaffaCakes118
-
Size
270KB
-
MD5
d9bbe88084b82dfa00dcdcf9d7ddf3fe
-
SHA1
0f832a2beab59a3c52a039822cee3fbd6a79b25b
-
SHA256
85417656b9a85ae8caf7154d84634a3a54337f6139c6ec61296ddf82cb7ab969
-
SHA512
b96c7004b9f6e1f7c6e3bf272bfefe385ae4edca4f677c3b235ff47f270857586843f8b2d5e1f9512a4339ed076acdce5fd7740f1f8d4385a0062c101fd43b80
-
SSDEEP
6144:B10d/oYkkiOrbU5qsVvAi9eTiYmTrQxgK94t8vkah4YtLE7LkPDfHZO:Md/rkkiOr45qsB3eOH/3aRIJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9bbe88084b82dfa00dcdcf9d7ddf3fe_JaffaCakes118
Files
-
d9bbe88084b82dfa00dcdcf9d7ddf3fe_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 772KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 270KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE