Static task
static1
Behavioral task
behavioral1
Sample
dc36b1780edf6711934cdd3b7726a885_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc36b1780edf6711934cdd3b7726a885_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dc36b1780edf6711934cdd3b7726a885_JaffaCakes118
-
Size
367KB
-
MD5
dc36b1780edf6711934cdd3b7726a885
-
SHA1
06ccd9bf40631a5a101304b7dd1050a2b89a4f54
-
SHA256
2de07c5cdb26d517ee3eb0a73e7272511d8c6298e3d4d3412a08ec9571d96db9
-
SHA512
a11e6d792efb293c29a9d2337e17c84e9d23628a943fe80b57e17a8eb131bbf1099ad8bbf3c157589330ba1974b8ea988bfee23f5fbfe0f07f6b0f427d1f393c
-
SSDEEP
6144:rMnhHopoF/5PpbyvyNV12WkqkPoYA8tiByO927+tZ9gKOP6NuVs18/MawdS0jboF:GHop4P7NVYP68tiB2yfqKOiNys18/MaH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc36b1780edf6711934cdd3b7726a885_JaffaCakes118
Files
-
dc36b1780edf6711934cdd3b7726a885_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
FHFHFH Size: 2B - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FHFHFH Size: 350KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FHFHFH Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE