Static task
static1
Behavioral task
behavioral1
Sample
df4fc911b2f3f08c480572aba1fddb0d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
df4fc911b2f3f08c480572aba1fddb0d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
df4fc911b2f3f08c480572aba1fddb0d_JaffaCakes118
-
Size
73KB
-
MD5
df4fc911b2f3f08c480572aba1fddb0d
-
SHA1
31b6d4039d36aae4699388f83000376714122790
-
SHA256
2fb6a589b70e4356656583be43fc865f5bc82507e5dc35209559a39fd9377a32
-
SHA512
3a263b1e0c6d0af2ab87974bfc2fbbfbe79fd2bc9919c730c351dd6d20732aefac3a6246ccb62df9cea6f59cd8442d870ee945c3c746fc5d2a40cf57a6a30984
-
SSDEEP
1536:W9E4RNytLOBcM/4Se6rfeL4sqxWfr9KhzDnx3JT3BEW:W9EKNytLk1fTeLoWfr9KhHnx3N3OW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df4fc911b2f3f08c480572aba1fddb0d_JaffaCakes118
Files
-
df4fc911b2f3f08c480572aba1fddb0d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE