Static task
static1
Behavioral task
behavioral1
Sample
dc736260abfe8613d3d197c1b1b412a6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc736260abfe8613d3d197c1b1b412a6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dc736260abfe8613d3d197c1b1b412a6_JaffaCakes118
-
Size
134KB
-
MD5
dc736260abfe8613d3d197c1b1b412a6
-
SHA1
ed1593acdf7c756dc49f88c7104c9f2fb965df5c
-
SHA256
92eaa83cccbdbb928802063276910d54c4c5852be965c2f8247415adeb94cf02
-
SHA512
3797b40ff5a60013e846836ba79e7341eb2feef469e07c2cb90a03f402defdc130c97bcb24364bfa3c9e4d86256bb7cfa093eb23ce53ad43898e564c73853f49
-
SSDEEP
3072:IA2qwh4tl18dLEuryrltqKZ+kZ4sj0HD9wv2W550gou:Nq9Ultv8k1+wv2W5+lu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc736260abfe8613d3d197c1b1b412a6_JaffaCakes118
Files
-
dc736260abfe8613d3d197c1b1b412a6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.5MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 180KB - Virtual size: 860KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 51KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Silvana Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DC Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE