Static task
static1
Behavioral task
behavioral1
Sample
dca21ab6d992be755d316ffa1bd1bdbd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dca21ab6d992be755d316ffa1bd1bdbd_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
dca21ab6d992be755d316ffa1bd1bdbd_JaffaCakes118
-
Size
196KB
-
MD5
dca21ab6d992be755d316ffa1bd1bdbd
-
SHA1
a6501905b5e66d15fabf5fedfb62cb24e481c093
-
SHA256
0a1f7aa5d55555ac67e4e47abfce5f28a105e809199b3b1fd750063c69288434
-
SHA512
2d9a974bd2c7d7fbe6f0adc04ae73dfb8fd8f6c797f5936f79bfa87c6a561f287dce070e2543b747f0c66a580a9e5bcc0d1146b0456490e5d80fd6a249c3ab9c
-
SSDEEP
3072:1rk3/REq5IJDpGTzIqVMTW0hiJWki77ZCJby9fAGRDMweFu:R7Z0yZAtk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dca21ab6d992be755d316ffa1bd1bdbd_JaffaCakes118
Files
-
dca21ab6d992be755d316ffa1bd1bdbd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 256.2MB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ksiNI Size: 4KB - Virtual size: 4KB