Static task
static1
Behavioral task
behavioral1
Sample
df3262cd07ec9bc6d9dd3f37209db24d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
df3262cd07ec9bc6d9dd3f37209db24d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
df3262cd07ec9bc6d9dd3f37209db24d_JaffaCakes118
-
Size
496KB
-
MD5
df3262cd07ec9bc6d9dd3f37209db24d
-
SHA1
93d3eaddf6cd877968c49b40b94785044cf59807
-
SHA256
df7e570eda20e8579a75dcc2ff433b3d5c22f7d3a72db95cf87e59aa7fdc5221
-
SHA512
86f70140d57d48b4b1ac0a636b1203f19d056ca3cf59caa7c1fee4a6c72f4222b6fa89ef38f624f42d1f33cf12fc4a252db800e3d9589bca2d32755369a838ba
-
SSDEEP
12288:GJYxqPMV0FR3PshYL7DXM6PyU5SbM4Swa3F6qOG0oE:aFR3PshY78Q/SjSw3G0R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df3262cd07ec9bc6d9dd3f37209db24d_JaffaCakes118
Files
-
df3262cd07ec9bc6d9dd3f37209db24d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 933KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 469KB - Virtual size: 472KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 668B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ