Static task
static1
Behavioral task
behavioral1
Sample
deab6328e0775c23170c9d61235ff82e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
deab6328e0775c23170c9d61235ff82e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
deab6328e0775c23170c9d61235ff82e_JaffaCakes118
-
Size
40KB
-
MD5
deab6328e0775c23170c9d61235ff82e
-
SHA1
1e09c181e4f89545fdb4a13e421f57c5ca07a95c
-
SHA256
7ca3840b5b9526a0ebeec6f8f4dd84e2a0e1978becf182da129bb70996e016b8
-
SHA512
8f62faa03ff88b6232f79f79c8f1238bc96a3d01bbde3db964fd00b43cbedf5c520d9bf0a05c6498825e36cc63e924e8a91021c81dd0520b2c326d679798cce1
-
SSDEEP
384:Tf2hRIWEi1j+DMfn471DYhcNI9Sd6YEt02SMG1dk:KhK3ko1DY84Sd+t02
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource deab6328e0775c23170c9d61235ff82e_JaffaCakes118
Files
-
deab6328e0775c23170c9d61235ff82e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 648B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE