Static task
static1
Behavioral task
behavioral1
Sample
dc3288fb4a1c5b6a4c7184753b166499_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
dc3288fb4a1c5b6a4c7184753b166499_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dc3288fb4a1c5b6a4c7184753b166499_JaffaCakes118
-
Size
1.9MB
-
MD5
dc3288fb4a1c5b6a4c7184753b166499
-
SHA1
69cbae2cb4a86f1a0c0ccb943f9942022c98c015
-
SHA256
ce6fe0ef953989ca7c61b66389ad6e02fab133e48c2c0fc4a1526ca2121e7697
-
SHA512
025e27912b3fbb25285926a7a7c321cb15b82214601d791fedaa25652cc3b2528614ea4749a097efd3cebfdf5432e6db32fa2f1e8055daca802ffb592b36e0d6
-
SSDEEP
24576:190QbVyG/c8VAUlTt2S7lyZ25bQZBYDmpUVmkhTn1IN93atpCGckbgiDgD+z+CG:vtgjYDmpUVZTn1IvatpBckbgiM+6CG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc3288fb4a1c5b6a4c7184753b166499_JaffaCakes118
Files
-
dc3288fb4a1c5b6a4c7184753b166499_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 804KB - Virtual size: 804KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 328KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ