Static task
static1
Behavioral task
behavioral1
Sample
df75163507d44b0fefe0aa1c80447a8d_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
df75163507d44b0fefe0aa1c80447a8d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
df75163507d44b0fefe0aa1c80447a8d_JaffaCakes118
-
Size
3.1MB
-
MD5
df75163507d44b0fefe0aa1c80447a8d
-
SHA1
0ae629e1f082a0578f7a0576ddd9a1f27fabe3d8
-
SHA256
46d73a39565b7753d996601f917bd2618e89b2c6301468a6dfe38f73364dcf3a
-
SHA512
2b5291892f0392fa073a5e083389ccaec8143f538dad0295f462f4f5d2d312146e25b6f4a605517fd77dce46e4c2e988e76f7b7ae3ba7682aae3b8d4d5b77631
-
SSDEEP
98304:9aaTMqHp8HA66SNYbFUUn8e3h00CEVYyk3Z:94O3SNYbH3rCEVYy+Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df75163507d44b0fefe0aa1c80447a8d_JaffaCakes118
Files
-
df75163507d44b0fefe0aa1c80447a8d_JaffaCakes118.exe windows:5 windows x86 arch:x86
5a868df1c6aad1eeb05dc85ade60f3db
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32 msvfw32
GetActiveWindow Q�7
Sections
.text Size: 2.3MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 704KB - Virtual size: 704KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ