Static task
static1
Behavioral task
behavioral1
Sample
df7879a4e96dd6b273aec682aa1e4a0b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
df7879a4e96dd6b273aec682aa1e4a0b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
df7879a4e96dd6b273aec682aa1e4a0b_JaffaCakes118
-
Size
714KB
-
MD5
df7879a4e96dd6b273aec682aa1e4a0b
-
SHA1
6f02e2649bf9a9f8135b26f90c7d9edc49913dfd
-
SHA256
6e69890dfa9fe1b020b0384b6abc09230ccb9b7a15fa5ad049d95209e11fdbd7
-
SHA512
10c2bdcf6dfe37858c52ece20314093d775b966076c001de03d14798510c371bde54bf9f62b009f2e23c16462389b25cddd72148cea01eee80311a4a6c4de842
-
SSDEEP
12288:Rp4V1j/n71qSrMXUQMrfjDBun54DFluTC52ULG9Q:RO1nrJlEULSQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df7879a4e96dd6b273aec682aa1e4a0b_JaffaCakes118
Files
-
df7879a4e96dd6b273aec682aa1e4a0b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
. Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.d Size: 628KB - Virtual size: 628KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.d Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE