Static task
static1
Behavioral task
behavioral1
Sample
df8a84ebdaa36dfb371fc80016f61568_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
df8a84ebdaa36dfb371fc80016f61568_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
df8a84ebdaa36dfb371fc80016f61568_JaffaCakes118
-
Size
2.4MB
-
MD5
df8a84ebdaa36dfb371fc80016f61568
-
SHA1
29fa0beba8d859d82d243d04125f30a1f3fd4f6b
-
SHA256
90757bdf0df7b4334f2f59aec9754c1ef1084b075178b85aa9366e321aba6288
-
SHA512
b1d3eb12d94e06ea23cbdce367d7f84cf5afe21dc6ff035c3cb859944252c9c4eaa49de0c797251bbd07938e8f64c275606f7b040f191982ad2cc0fbcdd4896c
-
SSDEEP
49152:Gp+7mVzBqrCOcU67eb2Oc+JxE3yZOMGm5wQKnLkwerrTH7Zg3:Gp+7mjqOP2b2qxE3bMNw/QwqH7S3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df8a84ebdaa36dfb371fc80016f61568_JaffaCakes118
Files
-
df8a84ebdaa36dfb371fc80016f61568_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 977KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 270KB - Virtual size: 720KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 564KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 423KB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 252KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE