Static task
static1
Behavioral task
behavioral1
Sample
dfde21039b3213b48cfb99eb7db9daa7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dfde21039b3213b48cfb99eb7db9daa7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dfde21039b3213b48cfb99eb7db9daa7_JaffaCakes118
-
Size
100KB
-
MD5
dfde21039b3213b48cfb99eb7db9daa7
-
SHA1
caf54256bc5d50e6e967620600c03d6514ff117f
-
SHA256
d05329a7ab3974b7b7f3e56ff6d29a071e8bc69133e7a958a2f5b01da46b8f90
-
SHA512
73920f60382f58da3fc37cc1693c9b35adaf0fabbfc08b3c3fdf153a7ff9bba5d703ce447259cb0d8cfa8b570ea217aecf9ea66337579138d587484f0a5bb375
-
SSDEEP
192:msWglP/m0QEzptfnB6lRxta5c0FHif6ogK1Arc:msxlP/mdEPfnB6tta5c0FY3ec
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfde21039b3213b48cfb99eb7db9daa7_JaffaCakes118
Files
-
dfde21039b3213b48cfb99eb7db9daa7_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 76KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE