Static task
static1
Behavioral task
behavioral1
Sample
de6b693d35a621cce60516a923ad5b9f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de6b693d35a621cce60516a923ad5b9f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de6b693d35a621cce60516a923ad5b9f_JaffaCakes118
-
Size
4.7MB
-
MD5
de6b693d35a621cce60516a923ad5b9f
-
SHA1
ac334519513e2ad1075a64353b579d8641447bd3
-
SHA256
d395454a46bf44ea923a2b2bab322eafa27765ab0dc36c3ddcd6e591938f5e7e
-
SHA512
c27192c0243f033f2f6e7c43ead342bc03f90062d5a6d64b7020c846a2a3f327d2633e6ddf1e85a3222795204f2051a16acebec1d34ccc32ef2919a106fed2a9
-
SSDEEP
98304:5Z5OYBcPAWdrMOuLDViaZhmgV+IO/qpsS9FYfkEOWSSB8DB:5Z5Opo35OgV+lqpZhx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de6b693d35a621cce60516a923ad5b9f_JaffaCakes118
Files
-
de6b693d35a621cce60516a923ad5b9f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 7.8MB - Virtual size: 7.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 980KB - Virtual size: 977KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 180KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ