Static task
static1
Behavioral task
behavioral1
Sample
df770ba6fb6edf848fd03db44ee8b527_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
df770ba6fb6edf848fd03db44ee8b527_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
df770ba6fb6edf848fd03db44ee8b527_JaffaCakes118
-
Size
152KB
-
MD5
df770ba6fb6edf848fd03db44ee8b527
-
SHA1
372b6ef95810144c2dc1db078a164495afb5ed20
-
SHA256
d9e33f72c04ba98deef7b2bff84a376683caf33409997fc9df18376ecd3ba585
-
SHA512
cd44802ac01f52b0c623844306fcc9c5e1420482743bbaaecb5a9b53ac9ef5ed27686a22a1a919a6a186198d3bdd48a2efcee4015d4509a4c9793d64029f2c01
-
SSDEEP
3072:1ckWEdXgDnLpGs8+VCrkrFrXgqcGvX0vNf7WUBTrGXEK/2:1ndwDy60LAXUZnGh2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df770ba6fb6edf848fd03db44ee8b527_JaffaCakes118
Files
-
df770ba6fb6edf848fd03db44ee8b527_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 22KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 118KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ