Static task
static1
Behavioral task
behavioral1
Sample
d9e1110e901e2ab2aa18dd603cb47a57_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d9e1110e901e2ab2aa18dd603cb47a57_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d9e1110e901e2ab2aa18dd603cb47a57_JaffaCakes118
-
Size
141KB
-
MD5
d9e1110e901e2ab2aa18dd603cb47a57
-
SHA1
df7511365f1018330382333d8203f292b5d35d35
-
SHA256
d1164e2d8800c7e8b5d43036bfe63e972feeec01bc508def3622f0060b4cee40
-
SHA512
72a9549c19f59324159281170d5a071b25bf2773539a578a248aeb4d92346d7015feb345e5302e11f952432197208734f74da0cd8e96201a1bc6dfaf3435407f
-
SSDEEP
3072:EPxUWsXIcoToU2gmrZaRtbh0jLf9bFWApfQjdMMtPQjduAc5gwRqAx:xvXx7/ZE+j7908f8MNduAmgwRqk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9e1110e901e2ab2aa18dd603cb47a57_JaffaCakes118
Files
-
d9e1110e901e2ab2aa18dd603cb47a57_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 162KB - Virtual size: 356KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE