Static task
static1
Behavioral task
behavioral1
Sample
da6242bfd112e366d06dd5bf5d6055c6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
da6242bfd112e366d06dd5bf5d6055c6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
da6242bfd112e366d06dd5bf5d6055c6_JaffaCakes118
-
Size
188KB
-
MD5
da6242bfd112e366d06dd5bf5d6055c6
-
SHA1
aa31151aac520c9381c62456134a1b4034400a37
-
SHA256
1ac3c69025751c4e951281d80b45d6ca64c4b7ab86079b48c2b7cf2ef90621ea
-
SHA512
c1f50c1ae69e855ce6cdfcce5fc7e3ce2b00ad651b42958193c8277febd102a974666ad8cfedf002d202080b30268f72ddf97550b7cc86e99e59bf32a10d470e
-
SSDEEP
3072:DLCsBxcpaJetv/JxDrkl5uMfMnpXBYOZhdySCmPevQJhVSh9oF1G45W3clJ8dX1a:DmPeetvPZTpaOZhdDevQ/Vwol3lYX1SB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da6242bfd112e366d06dd5bf5d6055c6_JaffaCakes118
Files
-
da6242bfd112e366d06dd5bf5d6055c6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.packed Size: 512B - Virtual size: 476KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 187KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE