Static task
static1
Behavioral task
behavioral1
Sample
dfd2dd1ea4bf0f3b8bd69c88069cb9ba_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dfd2dd1ea4bf0f3b8bd69c88069cb9ba_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dfd2dd1ea4bf0f3b8bd69c88069cb9ba_JaffaCakes118
-
Size
174KB
-
MD5
dfd2dd1ea4bf0f3b8bd69c88069cb9ba
-
SHA1
1e06c8a1d55ae9e061ecb456b89d7ab00b821b04
-
SHA256
1d5e09ce3c2c26a89921d0c9e5d4a766499eecc6d13d331deb2e808d6712820a
-
SHA512
187287e2cf91bfe60c4651000efe8afe561541ee2a56a788fd16b49b6c206aa6435b6e3753429d6ed3648390f5a007c0434c8a087e844ba68b97006166831582
-
SSDEEP
1536:bjmmB3ThIIPs/TgvIlexuD6SHsgwb6/9gRbqpQOOAUgUL8XL:b3B3ThIRsANHsi9eY/DisL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfd2dd1ea4bf0f3b8bd69c88069cb9ba_JaffaCakes118
Files
-
dfd2dd1ea4bf0f3b8bd69c88069cb9ba_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 808KB - Virtual size: 808KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 484B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ