Static task
static1
Behavioral task
behavioral1
Sample
da90a7ed64e3f8c852551f0b9d8f780d_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
da90a7ed64e3f8c852551f0b9d8f780d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
da90a7ed64e3f8c852551f0b9d8f780d_JaffaCakes118
-
Size
64KB
-
MD5
da90a7ed64e3f8c852551f0b9d8f780d
-
SHA1
e8a660e92c54c974f18e1c37d4b3e7ab7c48953f
-
SHA256
c0174bb44f954ccd1eb84de7eec4119e4d0a073bc719e8e8a9c9bd0f20640309
-
SHA512
2a9179902fa6f59bbb11947a64ecf520f4d0a18f525a9945a1a3518fd895e896a5a3931c4c9a5fabd8871051001e9cd3373aea3388e8ace21b824f1241800473
-
SSDEEP
384:5Lfvguq3eaoOQ0EbG1p+kUFltAG+3lURM7Qnv6YT7h3wdD/zmBSoWV:pfvgtXrQ0Ea4FfAT3uNFwx/zmVW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da90a7ed64e3f8c852551f0b9d8f780d_JaffaCakes118
Files
-
da90a7ed64e3f8c852551f0b9d8f780d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE