Static task
static1
Behavioral task
behavioral1
Sample
da2933b8656f45734f47e5ccfadaa58e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
da2933b8656f45734f47e5ccfadaa58e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
da2933b8656f45734f47e5ccfadaa58e_JaffaCakes118
-
Size
635KB
-
MD5
da2933b8656f45734f47e5ccfadaa58e
-
SHA1
ef1af9b0c7ef7895d3d9347fbf7596f3862e2b94
-
SHA256
c28e3aafb2ccae6bb5c5c23695ab114532f12696f5bb2bb938f01efbfc79a5ca
-
SHA512
b092b949456d78ab3b1e3a099a453d5a8f04b51a6d75bfc5d13e9b4098c9ceaff327b47f3f89a737e2403e60cb6c79be8108bd291701de3a54b500a08bb00757
-
SSDEEP
12288:/QfvGkNOlhbQybwAiFXoWex5jTy9F3Z4mxxeNGsQGjhRks:kROlhbJviF4zC9QmXjqUs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da2933b8656f45734f47e5ccfadaa58e_JaffaCakes118
Files
-
da2933b8656f45734f47e5ccfadaa58e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 20KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 274KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 337KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE