Static task
static1
Behavioral task
behavioral1
Sample
dcd43c71bbfe2505b4dfe5f66647c725_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dcd43c71bbfe2505b4dfe5f66647c725_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dcd43c71bbfe2505b4dfe5f66647c725_JaffaCakes118
-
Size
272KB
-
MD5
dcd43c71bbfe2505b4dfe5f66647c725
-
SHA1
52e2f527a5dcb36eef58b886b352653087ac97eb
-
SHA256
c02c213821089f3962070aa27580450c76dc40fbef9328243e40026057ad339f
-
SHA512
8385195b1d9a4b260c4f63366ac6d18e2293a254dc0097ebd5af09cb2b53e940790e8e7eb56a37db12c8439129f73def2389744c6fb2f98d74f139ab080c03a0
-
SSDEEP
6144:zCAUKfr3xHiZHPT8Oza9mJcJsFFO9TZ2M6gQagxHJZ66q:zjUIIVPtzbFM2M6gNs/6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dcd43c71bbfe2505b4dfe5f66647c725_JaffaCakes118
Files
-
dcd43c71bbfe2505b4dfe5f66647c725_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.code Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 266KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ