Static task
static1
Behavioral task
behavioral1
Sample
dc03d0e1b13f234b18ec4060e4d68176_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc03d0e1b13f234b18ec4060e4d68176_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dc03d0e1b13f234b18ec4060e4d68176_JaffaCakes118
-
Size
116KB
-
MD5
dc03d0e1b13f234b18ec4060e4d68176
-
SHA1
28b0dcd0e9e009b7902f0d124b8054c4716f86e9
-
SHA256
359f112cb95e2c85fb8b7588cc63b24642f766ed632c89b065f682a1ee47ecd9
-
SHA512
b49eb639a5cf8d815c471b9ad1c3806ffd9b1a3c3ba66d279d8fd676e7299793a1e8d28d92f2f7878289f10f3594da25b7b0f0dcf583296bbe1b354177b1b644
-
SSDEEP
3072:T/YXHe0TGg19v915DojEEbEi5/hHzQpMnw:TKHTJv9PlCnZHzQynw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc03d0e1b13f234b18ec4060e4d68176_JaffaCakes118
Files
-
dc03d0e1b13f234b18ec4060e4d68176_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ