Static task
static1
Behavioral task
behavioral1
Sample
daf1c40b214108d3a89fd252c0eceb81_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
daf1c40b214108d3a89fd252c0eceb81_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
daf1c40b214108d3a89fd252c0eceb81_JaffaCakes118
-
Size
54KB
-
MD5
daf1c40b214108d3a89fd252c0eceb81
-
SHA1
10b0d9c2355f4362405cf435292e1e669c1f640f
-
SHA256
5ecff5b6ebaef9604beef8df92aee41a94ff295e7aab86c4bc853ee30e90d843
-
SHA512
c58e8768778c7d2face7c7be70129f24acb70c68087ddb27dffc234b3b9a3c9d411c53134a250b0de5c659735b3b0407de6b6a156812f5cdaec47c5a4319a43a
-
SSDEEP
1536:dX4yWEIlBp61O9LiKlKUUUUUUUUyyO2Q:x/WNp65KlKUUUUUUUUyyO2Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource daf1c40b214108d3a89fd252c0eceb81_JaffaCakes118
Files
-
daf1c40b214108d3a89fd252c0eceb81_JaffaCakes118.exe windows:1 windows x86 arch:x86
f9ade0aa18f660a34a4fa23392e21838
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
Sections
�?����% Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
��#�z; Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
��[���Z� Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ