Static task
static1
Behavioral task
behavioral1
Sample
dbded64606c58e2373f17ceeb22139c6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dbded64606c58e2373f17ceeb22139c6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dbded64606c58e2373f17ceeb22139c6_JaffaCakes118
-
Size
56KB
-
MD5
dbded64606c58e2373f17ceeb22139c6
-
SHA1
04fd3a0c05c17ac959c470099b2d58de8d56b067
-
SHA256
2d91d4356d83d922a9370750114b191c4ee1c483de30e2ca62f5cd24141148c2
-
SHA512
844b1b1a4e472d946e7b152a52613405c44741d5e44d64c89ab32e6ed456a5f283c6aefaef80fd1982362bbee064b104f04cf4af7ce5d4549f43b4104b5ae0ea
-
SSDEEP
384:8/7jxrGzLKX4kW3IWWxvuwRuxDWLl+M9FGuGazpuG2Nu4P9DN/0V:QPxayoktJVRuXMDQ1N8V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbded64606c58e2373f17ceeb22139c6_JaffaCakes118
Files
-
dbded64606c58e2373f17ceeb22139c6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.sezo Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reco Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.geri Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yeni1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newimp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE