Static task
static1
Behavioral task
behavioral1
Sample
de3646f2e455e1af2d607dcd546d5e87_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
de3646f2e455e1af2d607dcd546d5e87_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de3646f2e455e1af2d607dcd546d5e87_JaffaCakes118
-
Size
144KB
-
MD5
de3646f2e455e1af2d607dcd546d5e87
-
SHA1
cdc34c994d74b2d5a65b5db54ca5d114b869f7db
-
SHA256
36718247b25a4497a6cb4c00fd68fc96380ec7106b42a10d59031e599bdc40b6
-
SHA512
d8e8cfc3da4148a38231a141ca681b1d64d72ac34011719e7dc27f7b2f6603172aa7f12097e8b3240ac458cdb18a6ae617a063aa64b0efaf6ef583da76d33311
-
SSDEEP
3072:cYYjxXpvAjSv0x8OvHutBSvecjAZgyCylLfgfecIfWTXBW1nJ7QT8Y:cFj5pvAjuwLPuWmkylwecIKXc1J7QTF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de3646f2e455e1af2d607dcd546d5e87_JaffaCakes118
Files
-
de3646f2e455e1af2d607dcd546d5e87_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
bloo Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cjmlh Size: 139KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
k Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE