Static task
static1
Behavioral task
behavioral1
Sample
dbb2c45cf988800e0958e8b77e4bdc6a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dbb2c45cf988800e0958e8b77e4bdc6a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dbb2c45cf988800e0958e8b77e4bdc6a_JaffaCakes118
-
Size
101KB
-
MD5
dbb2c45cf988800e0958e8b77e4bdc6a
-
SHA1
0f97979d3116d5678cf4c2e4da530958ab9ccd8d
-
SHA256
a3a82bc0cdec39823df7fd0bc26878649f9746bb22c622e4f8f5f4c649b68a17
-
SHA512
a7a19e8532ec5dd5919914fa10d22b6c1ef2043d95921be5a05f6c724e97103636e80521bd061fb36fa47f12a16b5cf49435ca19d5b6cfe3f69816cd311c8099
-
SSDEEP
1536:JJYp8nRby2AffCYwleN9nrasY/IgYKAw/RZ22O87PIlcUKU3rF6DEVCSA2zSRAMX:bC8dyRypmJam8LIlclU34HlaMvrdt4Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbb2c45cf988800e0958e8b77e4bdc6a_JaffaCakes118
Files
-
dbb2c45cf988800e0958e8b77e4bdc6a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
qpbnx8kv Size: - Virtual size: 188KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
i Size: 96KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rymk Size: 4KB - Virtual size: 217B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE