Static task
static1
Behavioral task
behavioral1
Sample
dfc1a9506baed4d0c545d7424ef3846d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dfc1a9506baed4d0c545d7424ef3846d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dfc1a9506baed4d0c545d7424ef3846d_JaffaCakes118
-
Size
2.4MB
-
MD5
dfc1a9506baed4d0c545d7424ef3846d
-
SHA1
f70f242dc9ca0a18b868bfb1d4d3e871f1c116f7
-
SHA256
e7afc4cdfb0382043f1f31c6933f34a8c0e289e20a667325d0ae09565a53a397
-
SHA512
e80262da74fbb309c45e13c892a416b80a813271bf18359ed89c92782f32c782a1d2b649f2bc8d3aadf7209b564f72d5e223ddc39934344dfe8ea674bc8fcce2
-
SSDEEP
49152:Olrxy+j5X74M3fEjTS/EiyyHsno1KR2x8Tc8S1GpCENrJFafi:OPzX9vE+EjtnkARS1BmJFr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfc1a9506baed4d0c545d7424ef3846d_JaffaCakes118
Files
-
dfc1a9506baed4d0c545d7424ef3846d_JaffaCakes118.exe windows:5 windows x86 arch:x86
e168ce622fcdfbeee59a23b07a24ef55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32 winmm
Ellipse 0<
Sections
.text Size: 1.5MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 788KB - Virtual size: 788KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ