Static task
static1
Behavioral task
behavioral1
Sample
dcb7a967075f95201ca263f1637b47e9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dcb7a967075f95201ca263f1637b47e9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dcb7a967075f95201ca263f1637b47e9_JaffaCakes118
-
Size
44KB
-
MD5
dcb7a967075f95201ca263f1637b47e9
-
SHA1
72a3ea102e03c4daae52d2df6f42798074443981
-
SHA256
72ba5b80970f58d4751c8ef31e1d597fea96717dbb30b7002a321501e791c363
-
SHA512
525edbbbf83caef36038d11495aa05a9b6946d52ecf04d81d19c0410e77a4ce05285f35f34311e09616fd53c012da5837c7e22cc3d8876de98e0776bbf45f50f
-
SSDEEP
768:xzGk6bFwHyy7iiiiiii0GQ50B+24zLEtKIyQ2:xCnyymiiiiiiiht140Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dcb7a967075f95201ca263f1637b47e9_JaffaCakes118
Files
-
dcb7a967075f95201ca263f1637b47e9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ