Static task
static1
Behavioral task
behavioral1
Sample
db049012c16a891466c9dca6054b4dcc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db049012c16a891466c9dca6054b4dcc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
db049012c16a891466c9dca6054b4dcc_JaffaCakes118
-
Size
73KB
-
MD5
db049012c16a891466c9dca6054b4dcc
-
SHA1
ab0f7799a0c71053ee0b0d70913d64176a0c1ff4
-
SHA256
dda09bffbe0e5be80a1750f5dfff8e732a78758a1c93881d5be08b2cfd9e15a7
-
SHA512
5f1665084af31f2b8da901937c9c3e49040152019ebcf0d4276780016ff30e585fdad720096c1d2b8ac7134ad8e19dc7e510588604f7f36fd4658c50a1b151be
-
SSDEEP
1536:ibemzcVRmQmAmOdFdjI2hr5flw2nXMnspRmq/lnDrIKMINa:ipzcFZmOdFdjISr5RXyqpoj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db049012c16a891466c9dca6054b4dcc_JaffaCakes118
Files
-
db049012c16a891466c9dca6054b4dcc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: 496B - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
; Size: 158KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE