Static task
static1
Behavioral task
behavioral1
Sample
dfec8eb4bdea166b5b3da7fc61f496a0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
dfec8eb4bdea166b5b3da7fc61f496a0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dfec8eb4bdea166b5b3da7fc61f496a0_JaffaCakes118
-
Size
98KB
-
MD5
dfec8eb4bdea166b5b3da7fc61f496a0
-
SHA1
c605a0c4914ca480bca5e41a2f1a08a5ca6e4155
-
SHA256
429bac5d26fc764ce95e6bb8da9fddb8a3c700d9ea89ae722a6a3b565156444f
-
SHA512
adc0b417a7f2f442e95c68cbeaec8306913953fec2c19d770fc23f3910d40999dcdd147853d33ff1767111393fe20a1178a64b2fb2051f870ba095c79888f1bf
-
SSDEEP
3072:qETYz4XQ0gLZAEh8uaPT0ao5Lj103MiV4:Uz4A0zK8do53y3i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfec8eb4bdea166b5b3da7fc61f496a0_JaffaCakes118
Files
-
dfec8eb4bdea166b5b3da7fc61f496a0_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ