Static task
static1
Behavioral task
behavioral1
Sample
d9d7372d82f9c1bdc3b3ec00c9ae847f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d9d7372d82f9c1bdc3b3ec00c9ae847f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d9d7372d82f9c1bdc3b3ec00c9ae847f_JaffaCakes118
-
Size
214KB
-
MD5
d9d7372d82f9c1bdc3b3ec00c9ae847f
-
SHA1
bd68665c0c817824d9df5f86b3f41570b700526c
-
SHA256
9f0157ba478a83c66bf76acb5c221872f29fd5b0dfa84c2cb2b5f39c7116a601
-
SHA512
0e5e8d25385538130d2345680fc26f1335f7a17734fc9993a0af6269a4f82700d13f83a7208b882966ebb930258cf15791c9e84690ce1667c110d56052be5e61
-
SSDEEP
3072:9WvDWmAW3HUQCG78KMtCtz/xG81fQwwt6H20R45Vo3dQWJatMVaEvB8WKhUh:9gD4azpPigzJh1fQTOCV4S14B8lhUh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9d7372d82f9c1bdc3b3ec00c9ae847f_JaffaCakes118
Files
-
d9d7372d82f9c1bdc3b3ec00c9ae847f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 97KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 21KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 11KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE