Static task
static1
Behavioral task
behavioral1
Sample
df005aeee7e09c2a3b8f5865d65e44d4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
df005aeee7e09c2a3b8f5865d65e44d4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
df005aeee7e09c2a3b8f5865d65e44d4_JaffaCakes118
-
Size
237KB
-
MD5
df005aeee7e09c2a3b8f5865d65e44d4
-
SHA1
addc4a25a26418a060eea795cb3db078bf8f1187
-
SHA256
5b25a0b75d4f740df42bfb8662e4d001432b2491e6dd8ff1e07a4130497083af
-
SHA512
dcfcdd21ad5d680c9b58fcaf269217ab497f24c64e8a3f8d9ac5f261f3baaa7d1b2dc02c673c612205620535d735335f3da7ba7ea9806ea67fbaf5d91c47bfe3
-
SSDEEP
6144:gEV5m/Ix9RLHVSLBXbNckOmtvew8LIp0ue:Lb8A9S1X6nbwZSD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df005aeee7e09c2a3b8f5865d65e44d4_JaffaCakes118
Files
-
df005aeee7e09c2a3b8f5865d65e44d4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ