Static task
static1
Behavioral task
behavioral1
Sample
dceb2d0da640fc0c25dfa58c6be01b50_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dceb2d0da640fc0c25dfa58c6be01b50_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dceb2d0da640fc0c25dfa58c6be01b50_JaffaCakes118
-
Size
5KB
-
MD5
dceb2d0da640fc0c25dfa58c6be01b50
-
SHA1
18b65298d5015f4ddf77ea10d12639cc2665d0b3
-
SHA256
4162d148e87845955f40310778e57b9a0a2a18df09feafa68c2f27bb14f020ad
-
SHA512
9997381d7929482ba5bb0a2ccd84cdfdb7d73c030838a9147799260588f301f70049b54c0ea0c405b667a81040d367bf4ef469df24cf8f1852fde938af9e8e69
-
SSDEEP
96:41Hy8+hRCfXoGR3ixaQmkgY+DwlnOtONfBnlTXo03Upya8+owp+tXaf3y445RvI:KCSfXvRTQmXD5wBlTXoA0XpCXaPyjI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dceb2d0da640fc0c25dfa58c6be01b50_JaffaCakes118
Files
-
dceb2d0da640fc0c25dfa58c6be01b50_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE