Static task
static1
Behavioral task
behavioral1
Sample
dcbe9d34a015239665d096e7e046b570_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
dcbe9d34a015239665d096e7e046b570_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dcbe9d34a015239665d096e7e046b570_JaffaCakes118
-
Size
228KB
-
MD5
dcbe9d34a015239665d096e7e046b570
-
SHA1
7f37a5b0a69ceb91d80c675f66437df7c773b90a
-
SHA256
cc287a5f358523efc9d7bec5ded6c5bc577fdd2af879f93ce2d2db9b4b6ddf4d
-
SHA512
52e1ff98f795d5e7054303d853507d4f6b32db1137884a4bc087460f1c5033daad1edcd59d598c01da88ef3db780c20529c75d8c4d2acf284b71eab85f9f1fd5
-
SSDEEP
6144:DjWyqJEeKKnvokKvsKrqRHuxYK9Y9c769/cA:DjWyqJEevnHKvsK4HY9Y9c769kA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dcbe9d34a015239665d096e7e046b570_JaffaCakes118
Files
-
dcbe9d34a015239665d096e7e046b570_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 103KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 122KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE