Static task
static1
Behavioral task
behavioral1
Sample
da2d13ff27aee715b8ba09fd79cc26e6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
da2d13ff27aee715b8ba09fd79cc26e6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
da2d13ff27aee715b8ba09fd79cc26e6_JaffaCakes118
-
Size
382KB
-
MD5
da2d13ff27aee715b8ba09fd79cc26e6
-
SHA1
fd05ae1b986cd088832112f32b60754181703d71
-
SHA256
3bfcf992b5e5628204cdde8113b9f1b9041f6ca8512b08c412a11c6da6db4dc6
-
SHA512
1d139d885e17cabff4f1e3437bb5fe8aa6284ef6b3c69fed8583bad9059f8f4f550b64baa9c0e43066a65cab316c107f5627a976874971c45c4eb2842f2c1dda
-
SSDEEP
6144:gfmqaMFIF3CH6LgWRjXeqg+cTaW1VwnZo3XaCqffuXj+KsIeoC6LlSl08qqULir7:LJLF3SPWdFRcTaWXp3nqnKKKsIewhSl1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da2d13ff27aee715b8ba09fd79cc26e6_JaffaCakes118
Files
-
da2d13ff27aee715b8ba09fd79cc26e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.itext Size: 862B - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.loader Size: - Virtual size: 3.0MB
.tss Size: - Virtual size: 448KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 332KB - Virtual size: 336KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE