Static task
static1
Behavioral task
behavioral1
Sample
df4f184e644c7cc88bf5e989b340b7b7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
df4f184e644c7cc88bf5e989b340b7b7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
df4f184e644c7cc88bf5e989b340b7b7_JaffaCakes118
-
Size
97KB
-
MD5
df4f184e644c7cc88bf5e989b340b7b7
-
SHA1
94681b7d6f068f6b2a438b4e2e9f93fc9b4d2a35
-
SHA256
0e154884c535ea9ff0a4853ce5ea12cdec8dd057950909d68f094c38df2fd109
-
SHA512
b7eaaaf335a844d5d03c64573a9a508b50b70560a64de0dcb1d087b4f308956d10b183b0087f281d933def4a4788511d14b6da412160fae341f7abd3917bcbee
-
SSDEEP
3072:QwguZ4qhLTVCM6H7eY9eP2BAC6Bg2dFtf:Qwh4KLBCM6H8iAUwbf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df4f184e644c7cc88bf5e989b340b7b7_JaffaCakes118
Files
-
df4f184e644c7cc88bf5e989b340b7b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 176KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ