Static task
static1
Behavioral task
behavioral1
Sample
de46c0496778ee902bc0a516c780171e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
de46c0496778ee902bc0a516c780171e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de46c0496778ee902bc0a516c780171e_JaffaCakes118
-
Size
646KB
-
MD5
de46c0496778ee902bc0a516c780171e
-
SHA1
26b88e5f5f5d1e507e6167654c70742dea53a718
-
SHA256
289b3de92b3b9aa138196299981c0743370ea8f732d7677afd599395fee802fa
-
SHA512
4c36dc30525943fad73f80bb5a06575a0fb4e6439f1e79d5fef7c3ecc94adb2a51f7bb399c1bed5641e2cb98153022df45603917f69559b5f01413282d922192
-
SSDEEP
12288:GZdnRLJWcXkyLn1vHetIoXU9n7FK/lGRgOUqmq9kR6lhKXoB3a9FsqJKB57d8fLV:G39r1vAIf9nJK/cRgOnmq9g6hB36rKX2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de46c0496778ee902bc0a516c780171e_JaffaCakes118
Files
-
de46c0496778ee902bc0a516c780171e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 317KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 321KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE