Static task
static1
Behavioral task
behavioral1
Sample
dcf549df06726b1a277f9b80d909df88_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dcf549df06726b1a277f9b80d909df88_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dcf549df06726b1a277f9b80d909df88_JaffaCakes118
-
Size
387KB
-
MD5
dcf549df06726b1a277f9b80d909df88
-
SHA1
d7ed4ef0433813a81f8ba324370332e1af25ac88
-
SHA256
0985f6aa9f82e710406318743428fcf0f868cb970b782cd060faaace81699b11
-
SHA512
37ae3344a259bd1145812a61ef09e1d5fd4e4f51e02f36483c246ce4f0d9510f924a6a3be7512aed4d03a6cd1f57d61e28097aded3318c6774aad59a540e5994
-
SSDEEP
6144:sLwwWF2rciw6uG7N8uwfn9/nsHiG2MGssbcmQO3WsbhW1MR+h70woH:VwWFOA6upnJnsHiMGsSp3nbwMW7Zc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dcf549df06726b1a277f9b80d909df88_JaffaCakes118
Files
-
dcf549df06726b1a277f9b80d909df88_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.4xiu08 Size: 783B - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.3p5fs0 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jzs9eu Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.t36j6h Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.5qdbnz Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xrib4z Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.puwo$h Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 469KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.9vo1dq Size: - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cqgu1c Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 381KB - Virtual size: 384KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 48B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE