Static task
static1
Behavioral task
behavioral1
Sample
df769dee0ff9c2a7d1ec500556f27cf6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
df769dee0ff9c2a7d1ec500556f27cf6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
df769dee0ff9c2a7d1ec500556f27cf6_JaffaCakes118
-
Size
123KB
-
MD5
df769dee0ff9c2a7d1ec500556f27cf6
-
SHA1
9030c2e578aca1706c9d1260b1cb32956fd96ca0
-
SHA256
393f595da9563edd6bf39c8e40cc3a635e2a773adf70aa81b7279663b9b5e7d1
-
SHA512
edb13db2ccf7a656fcc1e20825746cfc6d2a8e205b01a0c6eba16d5982521992eb2de2bc1c499c455984b631aa2ff323ca4091548b56f10d03dc112c3bf82e39
-
SSDEEP
1536:94W3z1l/eRHUdziravJlxOro9g8cq0l+pyt7GdJADGp/inMMlw68VsK8DWu9P39G:m2z121gPW+pyhGwGp/gxwpV6N9G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df769dee0ff9c2a7d1ec500556f27cf6_JaffaCakes118
Files
-
df769dee0ff9c2a7d1ec500556f27cf6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE