Static task
static1
Behavioral task
behavioral1
Sample
dacba208d9f84683d9a6c0c6bcb3839a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dacba208d9f84683d9a6c0c6bcb3839a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dacba208d9f84683d9a6c0c6bcb3839a_JaffaCakes118
-
Size
10KB
-
MD5
dacba208d9f84683d9a6c0c6bcb3839a
-
SHA1
9b85e0b9c0163cd775a0aa553fe9d275d1245d3b
-
SHA256
6d36f5487460eb5adc9731f0e81be81366e21e7e6da0b7581a3ba85f6cd349e1
-
SHA512
cec63b8fd3c603b5eba42d79e4ddd70ebb047ef359986973b25931edd4f630cc45233ea0d27097200f3b7f8f717e3426260f93c96c614479c37001a4125f0b13
-
SSDEEP
192:F/14JCqZf7aWLCpDiZ2sTbCl0bgKM0xi9wVrc4Ns9zsiexFaPIvozoV0DtvOzxE:Fd4J1ZzFLCofal0bC9wVnm9YieX0VL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dacba208d9f84683d9a6c0c6bcb3839a_JaffaCakes118
Files
-
dacba208d9f84683d9a6c0c6bcb3839a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE