Static task
static1
Behavioral task
behavioral1
Sample
daf3454826d8c1ed27dba62e8a16a24b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
daf3454826d8c1ed27dba62e8a16a24b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
daf3454826d8c1ed27dba62e8a16a24b_JaffaCakes118
-
Size
184KB
-
MD5
daf3454826d8c1ed27dba62e8a16a24b
-
SHA1
254d914fcf3f04738cbf7e24dc85097637dccc64
-
SHA256
44810aa48a14df1ab60830540fe6717b5c467c191eba7375bb333b97b514b322
-
SHA512
2c488a10581a011268061f4fedc96542351874d8c6b9a8028c1fc873b7329b59328bd53715f6ae624f36c8755a52d3cbe745f072c6ceaf10895be385dacd9bf4
-
SSDEEP
3072:1ihX0P6/2xeUaFPmgRMNlPTGQQm6ytwZEsrYkK4Kc1hpzEEnryIdx:glGQ98gWNlPTGQQm6agrdfhpz3ry
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource daf3454826d8c1ed27dba62e8a16a24b_JaffaCakes118
Files
-
daf3454826d8c1ed27dba62e8a16a24b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 15KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 159KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE