Static task
static1
Behavioral task
behavioral1
Sample
dedaa732fc40600dfb1d919112fecab3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
dedaa732fc40600dfb1d919112fecab3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dedaa732fc40600dfb1d919112fecab3_JaffaCakes118
-
Size
25KB
-
MD5
dedaa732fc40600dfb1d919112fecab3
-
SHA1
f3ce391d33ee67c2d3feb340c44407f199ad21b1
-
SHA256
c74246c039b90a977a2bb873a39d06a393a18a957870e61948f5d55acebc129f
-
SHA512
52d6765245b926f7c08cd12b725ac4717bc4bb84ec12d0d48af61d3254a8b97e7f252d93303d011533020f49337a39e929dabcd5240b95668d9f8adeb2d9c693
-
SSDEEP
192:L1UNSS2JJpRM9QWHjrzt7EHAS5K2+Hqr9ZCspE+TMwrRmK+vhOrbo:xUNShDM9QWvZ7So2ceM4m5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dedaa732fc40600dfb1d919112fecab3_JaffaCakes118
Files
-
dedaa732fc40600dfb1d919112fecab3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ