Static task
static1
Behavioral task
behavioral1
Sample
dc48eb0e80b61da63a6b70a0ab0c602f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
dc48eb0e80b61da63a6b70a0ab0c602f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dc48eb0e80b61da63a6b70a0ab0c602f_JaffaCakes118
-
Size
81KB
-
MD5
dc48eb0e80b61da63a6b70a0ab0c602f
-
SHA1
2ef2478ec355b75c6d460660eaa9547a4bf0ff47
-
SHA256
d86c2831652f0336e35b237123f371f4b45c67af466861d610213c5dcc2eae15
-
SHA512
dbdbc3731a934386f6b33da3a06eeea3b7326a7e69cad46c4627aa4db2b1842175ebb534cd42a88cf1a7fcfac48612221d2881c7d4f695289e6c1fe3cf369d61
-
SSDEEP
1536:IiWcoqrvo+jDktpbecdNgTZlmaWTuGf3GRZ6E5R/MKQF1w:IiXoqMIYttHNWXbKuGf3GaE5tbr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc48eb0e80b61da63a6b70a0ab0c602f_JaffaCakes118
Files
-
dc48eb0e80b61da63a6b70a0ab0c602f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Test Size: 100B - Virtual size: 100B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE