Static task
static1
Behavioral task
behavioral1
Sample
de2ad27e63190fccb76d0424119b0bc9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de2ad27e63190fccb76d0424119b0bc9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de2ad27e63190fccb76d0424119b0bc9_JaffaCakes118
-
Size
186KB
-
MD5
de2ad27e63190fccb76d0424119b0bc9
-
SHA1
ba58842718a34fa11280a74b325b2e70a1e65295
-
SHA256
13a70dc486d2170d950b8a3fdc8fe6e1c09419fecc4f8f7948d4da19868599b3
-
SHA512
3db03f27aebea49052f552c70a2dc8c1add075d2470a8abee1c5af3015d8038a25bb580b91486786dc1b10bc22c0293df3e75d7e4a91f896115438a434a952a5
-
SSDEEP
3072:CeNO7WXiJpad7gzeu2oBq+nZvGEzrjonA2PXF+NUBfw3FfJRjeNO7WXiJpad7gz5:Ceog4p6giMBp0EUXfd09eog4p6giMBpP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de2ad27e63190fccb76d0424119b0bc9_JaffaCakes118
Files
-
de2ad27e63190fccb76d0424119b0bc9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.PDX Size: - Virtual size: 628KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PDX Size: 183KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE