Static task
static1
Behavioral task
behavioral1
Sample
dbac3113bf52d2fcefae757160592565_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dbac3113bf52d2fcefae757160592565_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dbac3113bf52d2fcefae757160592565_JaffaCakes118
-
Size
11KB
-
MD5
dbac3113bf52d2fcefae757160592565
-
SHA1
b18b660dfe51b11f7d177c88d72e63dbcd2a1dc8
-
SHA256
92dd0de4f9c4e70856ab02bbb21a14a2d366e1a58a529076cab8bf173a77b2ff
-
SHA512
0c2b326b1c1866f8470e02194a650a039ac3253e8db8f0441b703f89b5ce7e63e66c33557c744052702f30bf4fae72d27d4dfcc28b8b800e8175b1f2f3df8d67
-
SSDEEP
192:TXi1UK0FQRJ3+kj6zKtd/XDiAAKdKWv5Hnjn9yH6fSI:ji1c23+6TF4Kdtv5D8aR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbac3113bf52d2fcefae757160592565_JaffaCakes118
Files
-
dbac3113bf52d2fcefae757160592565_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 5KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 933.0MB
.bsulsi Size: 542KB - Virtual size: 544KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ