Static task
static1
Behavioral task
behavioral1
Sample
da5ec0ad495c08ea298dbcd0fbd49b41_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
da5ec0ad495c08ea298dbcd0fbd49b41_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
da5ec0ad495c08ea298dbcd0fbd49b41_JaffaCakes118
-
Size
179KB
-
MD5
da5ec0ad495c08ea298dbcd0fbd49b41
-
SHA1
37ce8088cbabf45d1deeb51ef53ea04674f34829
-
SHA256
578ae61aff33f40fd0a127bdeba25f18da50047cc63a4f2f789ffaed703c7e8b
-
SHA512
c3cdcc304412c8dd66ce355b656b68ae8342e5b9ad46ccc9471b3c442eef2754f64430bb964eafb3366362d2786c9ff77f369d4b9135aadb579570a8341d6174
-
SSDEEP
3072:R+WSPQjEe6iG2T72ZNuFBRUN5yxdwImn03Nb8Q1bjk5bTgJxnrN/VnUVYGzBcGEc:R+W3jEeZG2T78uFANsxdwIKiFj3kGteb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da5ec0ad495c08ea298dbcd0fbd49b41_JaffaCakes118
Files
-
da5ec0ad495c08ea298dbcd0fbd49b41_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Ah(0 Size: - Virtual size: 536KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Ah(1 Size: 178KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Ah(2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE