Static task
static1
Behavioral task
behavioral1
Sample
db1478d2a9b4d4a90530313452642a35_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db1478d2a9b4d4a90530313452642a35_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
db1478d2a9b4d4a90530313452642a35_JaffaCakes118
-
Size
1.2MB
-
MD5
db1478d2a9b4d4a90530313452642a35
-
SHA1
196f311616fecc2ef153bc009a3c63af85fac128
-
SHA256
5e9223139c25ce8b735def9fae3d9992d89a52a05d07f78498befed4e36e84a5
-
SHA512
6066ce73048e83c9c6d5e02ba8d852f327abae9cc6722d1a4b83131be3697777d1a234a0874f112f1a07ebc44d9c273e230783ead3b7fdf8f6456cbbf892d982
-
SSDEEP
24576:8He8CLUj4HlK3SR9IN1ZMSXnU0Uwxdglob6DX:8Uwj4Hl1iTZMSE362KK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db1478d2a9b4d4a90530313452642a35_JaffaCakes118
Files
-
db1478d2a9b4d4a90530313452642a35_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�nD0 Size: 936KB - Virtual size: 936KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�nD1 Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�nD2 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE