Static task
static1
Behavioral task
behavioral1
Sample
de0536070e9f650a3d49485c4d089f37_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de0536070e9f650a3d49485c4d089f37_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de0536070e9f650a3d49485c4d089f37_JaffaCakes118
-
Size
339KB
-
MD5
de0536070e9f650a3d49485c4d089f37
-
SHA1
d17a96d1cee57135ba4a07066679aa77e0bb76e1
-
SHA256
94406f0e8f9680a7aec2fae0ebf43100d0a5ebcda71653f25957aaa0cfaa4de4
-
SHA512
c20a944542a04e4f4714da1fe7d016c895148da0b5d622e15df1ce84ae9660371b0b832dc5804b73a56e2df435fafe0cb2b69bbd4eb31fff077bc6cc078d9ff3
-
SSDEEP
6144:/6Dwq/i2xBxF3n6xi251/CKi3XH/jOdoiQFsFwGtFFHp1yuQEn0RUQykq/kVTQ/C:/6DwM/BP6w2fC93XLOd3QSLtFlp1yuQJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de0536070e9f650a3d49485c4d089f37_JaffaCakes118
Files
-
de0536070e9f650a3d49485c4d089f37_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE