Static task
static1
Behavioral task
behavioral1
Sample
de3b44d461a27af8b286711454e542cf_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de3b44d461a27af8b286711454e542cf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de3b44d461a27af8b286711454e542cf_JaffaCakes118
-
Size
456KB
-
MD5
de3b44d461a27af8b286711454e542cf
-
SHA1
7d586861f6e8c2da58b1180ba96fbc86bb896e30
-
SHA256
3ca2df0b1859a535ea47e1d0e65146edc27e10c2b83d096b01d4ec2651e4eb60
-
SHA512
513cea3af919fcbf5154e0cf495a214c3315e2d6a1863b6b02d5082311ac73631464967508aa825a8fdbfa5a27bd39a0275a3637142f15bbc634f92154bded53
-
SSDEEP
6144:eoCJd09QuW1FL2RfHoW/OEVo6v3ocAvrkrpE/AZgAFb6DJ7pPo5cmZpEZZXRCe3Y:eoWmQ6Rr/vRoodEoZ502vmRCe35C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de3b44d461a27af8b286711454e542cf_JaffaCakes118
Files
-
de3b44d461a27af8b286711454e542cf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 287KB - Virtual size: 292KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE