Static task
static1
Behavioral task
behavioral1
Sample
df1776c5a5a646de05795eff204e8ef3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
df1776c5a5a646de05795eff204e8ef3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
df1776c5a5a646de05795eff204e8ef3_JaffaCakes118
-
Size
16KB
-
MD5
df1776c5a5a646de05795eff204e8ef3
-
SHA1
64381214c606b1a35cec0a31280f202c419a64d4
-
SHA256
0de919ef5e8e83e2057c479eb4b169ff26fbaf246a688aa52361cda5ba30c12d
-
SHA512
81700321124f8edf5cafde239094e1630136e2e8a263b8d03c0e42345c5ff4835368bcd032bf7ee84fcde4a8b42e60127a15c8fed5abef5554e9a72e8bb9bd61
-
SSDEEP
192:yIA4CJwTQeIzDneiW7FqIuKPYVUNJLvXZFgeroC4V:DnCJwMF6iWwI4UzLBqerfi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df1776c5a5a646de05795eff204e8ef3_JaffaCakes118
Files
-
df1776c5a5a646de05795eff204e8ef3_JaffaCakes118.exe windows:4 windows x86 arch:x86
1470a0ba50e09d10917bc409c9f0af94
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
fwrite
malloc
memcpy
memset
signal
vfprintf
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 364B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 196B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE