Static task
static1
Behavioral task
behavioral1
Sample
dc35110fc01b346696fa9a44948229fb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc35110fc01b346696fa9a44948229fb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dc35110fc01b346696fa9a44948229fb_JaffaCakes118
-
Size
76KB
-
MD5
dc35110fc01b346696fa9a44948229fb
-
SHA1
73fd4408320320ef6a31b4d98e2aecce35b93c42
-
SHA256
678d15d0ad993db60d3311f49e0b038a84c11bd05a626027b7ecbb9537cd91de
-
SHA512
f60d297e4b027fb9f6e3fec1c6d98d024c5f16fec25cec0abc4c3d1b45d5e3a63fed61ccc22d0ed6c9247446e66203b8059252f5571a44e4e3d56f1ec181f9c1
-
SSDEEP
768:dhCaqO5FxUnroMoxcRkTkWIZ0UeexHGj2Uu/eyMp/CdLxmha5xXAPPpluIeBr7Yg:dhCaqOCo7NUeew+/eC0+vlHkSj+fX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc35110fc01b346696fa9a44948229fb_JaffaCakes118
Files
-
dc35110fc01b346696fa9a44948229fb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 35KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cpdbfsu Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE