Static task
static1
Behavioral task
behavioral1
Sample
d0ff0563e7d5bdf78ed5450c05d5b52e_JaffaCakes118.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
d0ff0563e7d5bdf78ed5450c05d5b52e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
d0ff0563e7d5bdf78ed5450c05d5b52e_JaffaCakes118
-
Size
143KB
-
MD5
d0ff0563e7d5bdf78ed5450c05d5b52e
-
SHA1
ea8a9227d6ec1388583f875af4635b6489299689
-
SHA256
dbc46624234d564894a312f4cf66e1877a97193f8feb9693345c7c6b72ff20ed
-
SHA512
b38ac876efc49b5fe058af070e0e996bc787b0cbc32f5413f86945a07507a86c47d275cbf550958ce37497cba4fc2ca8fac2f5b94dc3ecb0f5f78a8f511d539c
-
SSDEEP
3072:1aA2xLdvPFfj9Oe3bbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU749HxL:t2zJsuwvP6bQ7yMP+DE82745h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0ff0563e7d5bdf78ed5450c05d5b52e_JaffaCakes118
Files
-
d0ff0563e7d5bdf78ed5450c05d5b52e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 16KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 21KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE