Static task
static1
Behavioral task
behavioral1
Sample
dca43a8f1178c6fc92b7e4f588cf080e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dca43a8f1178c6fc92b7e4f588cf080e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dca43a8f1178c6fc92b7e4f588cf080e_JaffaCakes118
-
Size
607KB
-
MD5
dca43a8f1178c6fc92b7e4f588cf080e
-
SHA1
810a1a05aa1559ab40c689b89948e2e6e9b91fde
-
SHA256
8deb38592b09f364c844b9d8f436a4edf45ba0d08f96a340a750b8dc27805167
-
SHA512
347a13054e854ce432e855e3a6d8aeb62fc9a80890cd274c5aa044df19069ea07fc38e28bc1b9a69059c5441741e2ebf7a52e26f14fd9e2f554269374b475544
-
SSDEEP
12288:rnmkkkkkkkkkkkkkkkAvUMq/x8OuUYNAUJW7elvoWagt211+0s3P7:LMex8OuzZoEvo31Oz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dca43a8f1178c6fc92b7e4f588cf080e_JaffaCakes118
Files
-
dca43a8f1178c6fc92b7e4f588cf080e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.packed Size: - Virtual size: 988KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 607KB - Virtual size: 607KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE