Static task
static1
Behavioral task
behavioral1
Sample
dfc835ad8b227274316c640321d557e6_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
dfc835ad8b227274316c640321d557e6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dfc835ad8b227274316c640321d557e6_JaffaCakes118
-
Size
59KB
-
MD5
dfc835ad8b227274316c640321d557e6
-
SHA1
8eb90ad7d39e4bd6a5da41febe7f1e8be49d874e
-
SHA256
96b2a6d9f993cf515792214fa6d3d45a9e4697012d940912ff01d43cbe24d9cc
-
SHA512
b96f148900fb0f17037c8603c587338651f51019c07a974d30102b10f1c44889612c3f97684bfcd1b933f059a89e3a4f3a0838d51a0e7ac47c14c5a40fddc622
-
SSDEEP
768:bCDhIBtgwgnrWR5wxbrdWsNxs61MnRdwGBkxI/b4tOJ9Qjb6:bXtgwgnrwwxbrdl061MnR+W/UsJuv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfc835ad8b227274316c640321d557e6_JaffaCakes118
Files
-
dfc835ad8b227274316c640321d557e6_JaffaCakes118.exe windows:39850 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
qziriaia Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
bbaiyyrj Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bijirbay Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qajyyjar Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ