Static task
static1
Behavioral task
behavioral1
Sample
dc474e03944ad94676f192f15dbd5106_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc474e03944ad94676f192f15dbd5106_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dc474e03944ad94676f192f15dbd5106_JaffaCakes118
-
Size
232KB
-
MD5
dc474e03944ad94676f192f15dbd5106
-
SHA1
144baf0806591e8a8ab3cf3ed4924657275f887e
-
SHA256
fe0f4531ba56f184d0bc1e70e65ef4619b850ba6e591fe3f47b7c3ba61700514
-
SHA512
9f1b059d2a4af413354b7af662ca6a8c7fdabd37b733b0a904fa18f8b19ca8d7b63fbb4b3aadd529cf4b05a192abf807ea4ef7000e6c5c386ee389ae5a7d825e
-
SSDEEP
6144:0xotRhtjCI4sHFY1junnxNGWNzyABBwoVHk:yotRDOI4slRnxNGWNyiwoVHk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc474e03944ad94676f192f15dbd5106_JaffaCakes118
Files
-
dc474e03944ad94676f192f15dbd5106_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2720.0MB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ