Static task
static1
Behavioral task
behavioral1
Sample
d9caef588f0f69930a4c7ef16f65e8ed_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d9caef588f0f69930a4c7ef16f65e8ed_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d9caef588f0f69930a4c7ef16f65e8ed_JaffaCakes118
-
Size
179KB
-
MD5
d9caef588f0f69930a4c7ef16f65e8ed
-
SHA1
98e9b1332270b94cc00622f1533a1fdf3e3e1d57
-
SHA256
56ed0fa95b4aa25b0f29a99e0ff809740026b4c7699802f491b8880a7cd9985c
-
SHA512
554bbb471c39665e728198a694bec6247721dc7a110e2d2b6e10e11e62a39fafa7415b8aacafb44ba02a860387aff947ca00f1fdde645b206ef64fe409c63dc3
-
SSDEEP
3072:RshMrCL9U1WtvDg5T2eHEhj0FJZhEjER84bRHvJLf9x8Pw2QY7anDMvaUMc17r:RsKGG1J5T4IFJLEQR80dFw04mq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9caef588f0f69930a4c7ef16f65e8ed_JaffaCakes118
Files
-
d9caef588f0f69930a4c7ef16f65e8ed_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsrc Size: 204B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE