Static task
static1
Behavioral task
behavioral1
Sample
df5666511806e4151ea5632b0ac4ee95_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
df5666511806e4151ea5632b0ac4ee95_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
df5666511806e4151ea5632b0ac4ee95_JaffaCakes118
-
Size
53KB
-
MD5
df5666511806e4151ea5632b0ac4ee95
-
SHA1
0db00df75f94c8384baf406e7a994e824ab8e766
-
SHA256
5497b8886191c6430833c93a3335a96f7046abc3cb33d30517096afe4ab405ef
-
SHA512
529e84897bf23572131759b64a93bcb27460db13c8bdacd3a189f7959a76149b075a1a0d3a042ac7251836d82b737fc6e3e60a8ae79b8add2c54490295ea8252
-
SSDEEP
1536:zxFRA6wTqeeI07zYRL8GAUbNCUySJFeuchm:zzu07KYGTc+eU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df5666511806e4151ea5632b0ac4ee95_JaffaCakes118
Files
-
df5666511806e4151ea5632b0ac4ee95_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ