Static task
static1
Behavioral task
behavioral1
Sample
db10ba817c580b2a666b7ee50ae7b483_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db10ba817c580b2a666b7ee50ae7b483_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
db10ba817c580b2a666b7ee50ae7b483_JaffaCakes118
-
Size
131KB
-
MD5
db10ba817c580b2a666b7ee50ae7b483
-
SHA1
bf9c413cbe01333db4be23e990c582d61a0aac17
-
SHA256
14aad6b72d8e83c3b4102dfafa997bda2d17d3ca11d718d86049d2a069b6a6a8
-
SHA512
0a0e6bbb060de1ef07400da74ab8a17478547aaf91b1a33742214c204339119372b296c6bb123b449e36c4bf2108637524718acc737cdc0ebe8b58144ba8e219
-
SSDEEP
3072:TC7r2IWagoutWXvsLx4B7ZwzK0OsIPv4vnX+UZHBRLZ:Tq2oSWXDB7rsIPvoOEBRF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db10ba817c580b2a666b7ee50ae7b483_JaffaCakes118
Files
-
db10ba817c580b2a666b7ee50ae7b483_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE