Static task
static1
Behavioral task
behavioral1
Sample
de4e1ab68b8c01a53aeb80f3bfccff9b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
de4e1ab68b8c01a53aeb80f3bfccff9b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de4e1ab68b8c01a53aeb80f3bfccff9b_JaffaCakes118
-
Size
240KB
-
MD5
de4e1ab68b8c01a53aeb80f3bfccff9b
-
SHA1
502ef70e624ca500c1acf8f8a3645f54729db144
-
SHA256
07489417c8f476d0161c5d5a28a54fa0474b4bedc4b40f0b3aa4f054017a2085
-
SHA512
321816f533c5c1880677eaaf5c0547e7c9ad37c5007304d4c825820a3b2d16e9c5f88e4faae1411c0352759e144605cc3db79949065a6176e00d5313f9c80d05
-
SSDEEP
6144:Wy27mi2Hj3Qg/9tt2rerer1TTUNNhxHLvvB11dAUbbKuu:WyUmZrQgQTT6xrvvB11dBbb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de4e1ab68b8c01a53aeb80f3bfccff9b_JaffaCakes118
Files
-
de4e1ab68b8c01a53aeb80f3bfccff9b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 74KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 984KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE