Static task
static1
Behavioral task
behavioral1
Sample
cfb6cc968ef5fb86b07c81f60cc84707_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cfb6cc968ef5fb86b07c81f60cc84707_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cfb6cc968ef5fb86b07c81f60cc84707_JaffaCakes118
-
Size
40KB
-
MD5
cfb6cc968ef5fb86b07c81f60cc84707
-
SHA1
d9746d08fc96fde8a68cfad20d1b6e041d2d6895
-
SHA256
f504c0cda819ddaad1c1bd02f4584b2fca0bd7ac4423a1bef58ae59e06e82b43
-
SHA512
71d91c20a3da8e2b72499b6da682e25164bfce6cb8e08178e3f6884511442fb18fe14cae41c8e845c4c19d5a477c663e2d22eb984be063341358418cf2654ccb
-
SSDEEP
192:5oaV34oeS3dti4EGhb8JDFnmnG88DKbTur370hdsknz+wYpC37+1WpX4Wm:5oID9b8JDFwbRbw370Aa+wYpC3754T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfb6cc968ef5fb86b07c81f60cc84707_JaffaCakes118
Files
-
cfb6cc968ef5fb86b07c81f60cc84707_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
. Size: 5KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
. Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ