Static task
static1
Behavioral task
behavioral1
Sample
dec6598fe35e5502770f0788914bf7f6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
dec6598fe35e5502770f0788914bf7f6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dec6598fe35e5502770f0788914bf7f6_JaffaCakes118
-
Size
518KB
-
MD5
dec6598fe35e5502770f0788914bf7f6
-
SHA1
8cfb3789c32c4fef2bb376b7cd54b53d7efd7a4a
-
SHA256
4a6c33cd45b05697692f5adf70dedcddd8d8e85b79fa73cb72c0efe5bab47454
-
SHA512
15b2ee8d29872f04b8259230b2ee90d73706e8c379dae25950908c05c2d457abe0e03a31c0878d12215c5d274b5610dadbc206c06329f52b97be6b605c94f757
-
SSDEEP
6144:UZfec9EbXDk6RkJKWnmy+g4g/UOPSe570Szp3b/UOPSe570Szp3bE2E4:UZWtI6RknUOB0vOB0v4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dec6598fe35e5502770f0788914bf7f6_JaffaCakes118
Files
-
dec6598fe35e5502770f0788914bf7f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ