Static task
static1
Behavioral task
behavioral1
Sample
df68cca68255ab8a2a3b8d802c7e52d1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
df68cca68255ab8a2a3b8d802c7e52d1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
df68cca68255ab8a2a3b8d802c7e52d1_JaffaCakes118
-
Size
46KB
-
MD5
df68cca68255ab8a2a3b8d802c7e52d1
-
SHA1
e8557115b75528b2545f7a906f21244f442e5ea2
-
SHA256
a19a8d42c067bbe24efb3a12e7fa58b494b8d0437fff2af660bd1f7b08d828b5
-
SHA512
815627bf5e2f94d3806022f151ff7bc1b14fdd4e49c22bb1c82fcbf3bebdae9164b8c197f9071ee355c220fa57a81f072814c3ae120bef6d3a563f8a713c3b37
-
SSDEEP
768:j+vqZS1szuRyntCxIseJrL4r8ot9inDRGkDVYCEu7prXPq/NV/v:qvqZS1sI0La8otcDRtDwu9LmVv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df68cca68255ab8a2a3b8d802c7e52d1_JaffaCakes118
Files
-
df68cca68255ab8a2a3b8d802c7e52d1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ