Static task
static1
Behavioral task
behavioral1
Sample
dbcd3a79da365f9ea594996aab94418e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dbcd3a79da365f9ea594996aab94418e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dbcd3a79da365f9ea594996aab94418e_JaffaCakes118
-
Size
127KB
-
MD5
dbcd3a79da365f9ea594996aab94418e
-
SHA1
131c1ce2aa7ecd2949d2da4fb012ad4d4857dcc4
-
SHA256
04fa47f1b95d73b6bd8eb569fb01a722177082d97da0a836c9fb0ec27b281309
-
SHA512
60d465b5d2d7b6c48d7d8956af4a80e371045ef93de782f5eb769d895b7c647517bbab94d1f37065c4312911849eddae64b7abd507dc01de567994d9ec7c6e92
-
SSDEEP
3072:VRoNLy2k8EZXd0QRSdBnkJeb6HXR+J3YOXJWaMQE3:voo8EgQRSddbrJpZjE3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbcd3a79da365f9ea594996aab94418e_JaffaCakes118
Files
-
dbcd3a79da365f9ea594996aab94418e_JaffaCakes118.exe windows:4 windows x86 arch:x86
b5612e99c648c99574f8ebc51bb2ee42
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
Sections
.ym3vqx Size: 1KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.5b7sua Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.0lu7zc Size: - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.efkg77 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rbss Size: - Virtual size: 3.0MB
.bss Size: - Virtual size: 420KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 123KB - Virtual size: 124KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FYPMJW8F Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ