Static task
static1
Behavioral task
behavioral1
Sample
dcd6fdc8a8c52d00f5e7feeb6510ec18_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dcd6fdc8a8c52d00f5e7feeb6510ec18_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dcd6fdc8a8c52d00f5e7feeb6510ec18_JaffaCakes118
-
Size
378KB
-
MD5
dcd6fdc8a8c52d00f5e7feeb6510ec18
-
SHA1
1edced46d617fe90a4d368ae9a0af8c53cb36b8e
-
SHA256
26fa7b43d8e17c027a5194d95684cf837afe013ca7658f9f4b749173ef5652c4
-
SHA512
4869b16363d4c8b0fda21d826d5bb8631c96643691c8747b74b37006a6c3a4b5071d4380fea3eea86b71a115137b1aeb2e8129d3b95d79dff8a8ae8ba0e2b6fd
-
SSDEEP
6144:TyqphrgSbdqx+69K5XiRUD7Eofd5Jsa+4gYHokZmuLFn+df/pwxhqMqyAdmiDKq3:qSbdoYBuO7Eofd5Ws3c8Fncf0hqHmWKK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dcd6fdc8a8c52d00f5e7feeb6510ec18_JaffaCakes118
Files
-
dcd6fdc8a8c52d00f5e7feeb6510ec18_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
G^U0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
G^U1 Size: 377KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
G^U2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE