Static task
static1
Behavioral task
behavioral1
Sample
dfabfcb420733b0faaf254cb06a0be9c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
dfabfcb420733b0faaf254cb06a0be9c_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
dfabfcb420733b0faaf254cb06a0be9c_JaffaCakes118
-
Size
72KB
-
MD5
dfabfcb420733b0faaf254cb06a0be9c
-
SHA1
d45f3e91726cc9659bedf6fbbe2591c1e593dbd1
-
SHA256
17e9e4bdcc4a2feee00c2ce5aa1c152da285cb5dc9a6482e6d50ddc54a20ee95
-
SHA512
0e536f0f318d5c409434540a7858c479fac4783937460573c6c7493754dbc5485d216ad3863ce44fb7e6815c3ceffa9b053d41ba18144df1ad874ce6a13f1142
-
SSDEEP
768:LUKMgzw0ylsA3DlZQs98TTkjehaE2kMlw7gf+1BxPWFsgvoNqrIlwd1iUM/Q4zB0:AlsAnHWTojeEV9eyHJKvQc9MKGaApqT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfabfcb420733b0faaf254cb06a0be9c_JaffaCakes118
Files
-
dfabfcb420733b0faaf254cb06a0be9c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.2MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 28KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 104KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 154KB - Virtual size: 1020KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE