Static task
static1
Behavioral task
behavioral1
Sample
dc169cbc19f9ea102c1b5779ff1a9040_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc169cbc19f9ea102c1b5779ff1a9040_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dc169cbc19f9ea102c1b5779ff1a9040_JaffaCakes118
-
Size
580KB
-
MD5
dc169cbc19f9ea102c1b5779ff1a9040
-
SHA1
7a7938b6df5cd4de9a84ab038157cd8b75f3bd02
-
SHA256
d46c8f76cad724d42292c24f46a7b5359496d7e5e8c310e083a4a62abbcea0b7
-
SHA512
9704a89176105a96f9ab1557412472b17d3c28c934ee7e1ea2bd1a1f5a5b4cb4c8069cd84503d6e6be1f21e3505d026fe3378faebba5cac039e531708308ddac
-
SSDEEP
12288:ehNz/v11N7xMoqiY8yqhC4gRXjqUI2m+Bdr:s/vDN9MzTACxU+Bl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc169cbc19f9ea102c1b5779ff1a9040_JaffaCakes118
Files
-
dc169cbc19f9ea102c1b5779ff1a9040_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.1MB - Virtual size: 8.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE