Static task
static1
Behavioral task
behavioral1
Sample
df5d012c8c2b6085b8a311a88d9b7b28_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
df5d012c8c2b6085b8a311a88d9b7b28_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
df5d012c8c2b6085b8a311a88d9b7b28_JaffaCakes118
-
Size
261KB
-
MD5
df5d012c8c2b6085b8a311a88d9b7b28
-
SHA1
846754231d49eb196f782f576f122c967ad9b2b4
-
SHA256
5e27e572832e0d1afe1978dd46bcc8c620cf6d947eca4d2e68fd53350c3946c7
-
SHA512
f00c66625f6ebbd8052b5096f7ec6ad60592f62c5248434439f1ff14d9846fd613a9e2b31782e8306a7b4a9044f6c12b3b9c2bcd293a0a5078430a7e81fab9f5
-
SSDEEP
6144:BGuuR4WyVyfmnVW5GJZ2tNYLj8Mfss0jHx:vu2ieVzYKj86ssE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df5d012c8c2b6085b8a311a88d9b7b28_JaffaCakes118
Files
-
df5d012c8c2b6085b8a311a88d9b7b28_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 56KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 152KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE