Static task
static1
Behavioral task
behavioral1
Sample
df888856754329ace739f59eef698c81_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
df888856754329ace739f59eef698c81_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
df888856754329ace739f59eef698c81_JaffaCakes118
-
Size
52KB
-
MD5
df888856754329ace739f59eef698c81
-
SHA1
aca0889aff123c7545d810e33dc3e567355fac11
-
SHA256
3a211523311d37a644800db2e948041f9f2cc0d44e0ae0203f58116c7ba2f726
-
SHA512
4d94b535dbf7348730eaa88d2a52077b5b4d1a6c0dda4b4fbd1fd351cd6a6613510471b1f88e5743b0a071884f462419b344bb83a770f7f961e6b23fb25cc886
-
SSDEEP
768:lWVlthGu65Wk/MXlgc/E7S1eq7Rgm7Q7I9ppqAAO9Ud3wknHq4OXxAiTDXr:loltRfrM9qO/CmAA3NnonDX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df888856754329ace739f59eef698c81_JaffaCakes118
Files
-
df888856754329ace739f59eef698c81_JaffaCakes118.exe windows:4 windows x86 arch:x86
5f7c1c5f782810323dacf24bcb0e83db
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
ExitProcess
Sections
.text Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 110B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 245B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE