Static task
static1
Behavioral task
behavioral1
Sample
cdef064df5373875809458eb5d8fdbd1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
cdef064df5373875809458eb5d8fdbd1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cdef064df5373875809458eb5d8fdbd1_JaffaCakes118
-
Size
616KB
-
MD5
cdef064df5373875809458eb5d8fdbd1
-
SHA1
2e0ed26d70183ab47b06dca3b078610bf9004b7d
-
SHA256
0b10f50f682e5f1bf03a125eb1e2c2fb83f1d93ca53ba95d8858a59492b2cfc1
-
SHA512
b7849f260d481594fbc704c8c675cd949c07c3d0ef01dd8b600d0d10c4e5b73e0daffe67e2fd2cd83ca065d64c76d4964009fba1fd8362626594b4c58b8e3766
-
SSDEEP
12288:KlLlUSg1Y9VOlfC7uT5/nKuj6SWljKkoe8v7sOrqqnjrDMGTZl7ggI1s:KXBg1Y90lfdNPNFMjKkoe8zsGXZ1l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cdef064df5373875809458eb5d8fdbd1_JaffaCakes118
Files
-
cdef064df5373875809458eb5d8fdbd1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 10.8MB - Virtual size: 35.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE