Static task
static1
Behavioral task
behavioral1
Sample
dc688209c1b6e74d93cc5d18e4630aef_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
dc688209c1b6e74d93cc5d18e4630aef_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dc688209c1b6e74d93cc5d18e4630aef_JaffaCakes118
-
Size
32KB
-
MD5
dc688209c1b6e74d93cc5d18e4630aef
-
SHA1
cda21fa9dc093918dfaf1e35cd035f1446fa5150
-
SHA256
0f37ad306b58c6368222c20c787d30f9b2bf8c8064bbdece970f3b0f2d2e1cd3
-
SHA512
cdcd26e28eaad7e6741a7323e646f4e88a335e5e8c80eac107bf8386d82f5417b59c7a2917e62171942c5a414dcce9a944379f8c0375aba8be419147aa9a34a6
-
SSDEEP
192:YH5RBQnD3Z2LN/1V0KYtnsj17vMdsEuAQbIitGOhDiydJ9QK/e44zXp:88wN/1VdYtG1zMdsEuAQMKPQQe44zXp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc688209c1b6e74d93cc5d18e4630aef_JaffaCakes118
Files
-
dc688209c1b6e74d93cc5d18e4630aef_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ