Static task
static1
Behavioral task
behavioral1
Sample
da3c69df56699cc8e33d0c7bbb3ea3b8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
da3c69df56699cc8e33d0c7bbb3ea3b8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
da3c69df56699cc8e33d0c7bbb3ea3b8_JaffaCakes118
-
Size
367KB
-
MD5
da3c69df56699cc8e33d0c7bbb3ea3b8
-
SHA1
097ab1b310edb2a70642a07a4497e3936eee1f3b
-
SHA256
3950e6ab22d224eb09df1dc09a60316aff2443a5a6ebf20bd15c32b99243dd8b
-
SHA512
eb20263b450146a87d0b414321ca87f3ba11affd912e7f941ec51461ce5ce4af9b4774ac7bb8b6e88fc569cd54ca2d036d43e0d723201cb4d7d62bd875db9f41
-
SSDEEP
6144:4i1vIm8dO1PuIzY1H1SXyPHUZEqfsqEjcXjBskd9WwbzNB+SbJnObC+cJnmTY58/:V1Qg1BzIH1SXyPiEqEqEjo2kN/NBnVOD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da3c69df56699cc8e33d0c7bbb3ea3b8_JaffaCakes118
Files
-
da3c69df56699cc8e33d0c7bbb3ea3b8_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rtss Size: - Virtual size: 3.0MB
.info Size: - Virtual size: 476KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tss Size: 364KB - Virtual size: 368KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE