Static task
static1
Behavioral task
behavioral1
Sample
de7503b3f369c0388902dd163593b46e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de7503b3f369c0388902dd163593b46e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de7503b3f369c0388902dd163593b46e_JaffaCakes118
-
Size
20KB
-
MD5
de7503b3f369c0388902dd163593b46e
-
SHA1
2530451ce2e08270335ebbfceb842f2aa3d604f5
-
SHA256
cfcd58b8c44e28f1cdd70b8f662bb86a9d07cdde6017c8b4f8287d15d83fd24e
-
SHA512
b033670cc220e3f59b9ce1a482fe75f82fde1a250d8068e4212c5a1d0ad30f98a9c5c4bca7942eaa03d090d700d4a43e5cd75566cfa51551a153a95bcb371698
-
SSDEEP
192:pykPVwDOsDwGUD66SDgZGD7BaTbKJ/mtTc7f5FDWNnEyJfv3C0jHq56TgoMINWx3:pXtuV68aTGRiTh1JH3jjHqIThM74K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de7503b3f369c0388902dd163593b46e_JaffaCakes118
Files
-
de7503b3f369c0388902dd163593b46e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MaskPE Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
www.xjzh Size: 512B - Virtual size: 520B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xh520 Size: 22B - Virtual size: 22B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ