Static task
static1
Behavioral task
behavioral1
Sample
df3f8919f9ac4d78448710d3bfa8a80a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
df3f8919f9ac4d78448710d3bfa8a80a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
df3f8919f9ac4d78448710d3bfa8a80a_JaffaCakes118
-
Size
18KB
-
MD5
df3f8919f9ac4d78448710d3bfa8a80a
-
SHA1
60bb3ac4dd188f0d86db8a761ae8991c304d4b39
-
SHA256
9d125be28c005bb92835301e7abdf06cce39d304f9abaef57961a1b9de8b4edb
-
SHA512
2530e986591fe2c8afc0fae9b427531393df5e2e93d6f952587c2c6e099aa2786a0bd1f84fbaedbba1659b9523db321eda76a97afaa2ab053f9d7cf75c7ec377
-
SSDEEP
384:Wu2bQ9KaonykNuv210vgdAqCV2KWaKCIHGdQvkv2RiTzIFkDO+cRj4g:WVWKzykNz0sSWaKsAu0zKg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df3f8919f9ac4d78448710d3bfa8a80a_JaffaCakes118
Files
-
df3f8919f9ac4d78448710d3bfa8a80a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
nsp0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 17KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE