Static task
static1
Behavioral task
behavioral1
Sample
dbc129050e6c494026fb313e1c267f1e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dbc129050e6c494026fb313e1c267f1e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dbc129050e6c494026fb313e1c267f1e_JaffaCakes118
-
Size
277KB
-
MD5
dbc129050e6c494026fb313e1c267f1e
-
SHA1
b9e88167af67a0a860b9d2476871ef1ba39932ab
-
SHA256
c1c6b992405d54f1d1d7d3d6f6ec2bb6a971c4fbb7bfd1135f3c48e0f75a349c
-
SHA512
4d361cbe5295c5bf1ecc08da392d81ea83ef1922ac24bf8ddf2e87bf548cd0f9b95bd1f5f403c0e084e85c5803a5a5ba4b2b49e48a1da144abc1d0961071a10e
-
SSDEEP
6144:UWLTkTh5t18xiuA3wM4OPsu0bSWKc769/cU:UWPkR1p5g6PeSJc769kU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbc129050e6c494026fb313e1c267f1e_JaffaCakes118
Files
-
dbc129050e6c494026fb313e1c267f1e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 162KB - Virtual size: 624KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 46KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE