Static task
static1
Behavioral task
behavioral1
Sample
df466daf85510fec4a021d7687c9f3f4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
df466daf85510fec4a021d7687c9f3f4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
df466daf85510fec4a021d7687c9f3f4_JaffaCakes118
-
Size
259KB
-
MD5
df466daf85510fec4a021d7687c9f3f4
-
SHA1
d0d8809db1250a6cab7b844ea868fbb46be8e4af
-
SHA256
f5b7b3fc3ee52d1fcec6dd18f9e93142f112da7c63f4d1f5590c6e6e7d10574b
-
SHA512
1965eea4ecd860f5bf0bdc991579311b6ba097b8b2c312d344744b4dd0ca7c7435bd8f3dcc9edfcba0c361dad70c27fdc44a499c343c7b6ef09469d20fbc16b4
-
SSDEEP
6144:/Wugm7rlK3APez44w3lGbt38Z7zDJ4/QTmfsIKA:v/rloAPe5F27xClfs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df466daf85510fec4a021d7687c9f3f4_JaffaCakes118
Files
-
df466daf85510fec4a021d7687c9f3f4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 400KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 255KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE