Static task
static1
Behavioral task
behavioral1
Sample
dfed35854e1e8c28e3b0a13bffc12555_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dfed35854e1e8c28e3b0a13bffc12555_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dfed35854e1e8c28e3b0a13bffc12555_JaffaCakes118
-
Size
451KB
-
MD5
dfed35854e1e8c28e3b0a13bffc12555
-
SHA1
1316f29bfa432bf7b4d802924ded7e289924f098
-
SHA256
7047ae28bb03a72de6d0f25175de4b449998f9164a8732f348bc7bfdd2bb03fd
-
SHA512
24d2476f8df7060c945e20816616fbb6c560cc3d0f413c8e6abc935d5b0d4e697074e971ca6d93a257ee08c976e0f0a6045a0794834b7a3a0fccd0a8e80da5f5
-
SSDEEP
6144:UZfec9EbXDk6RkdKdl+lXDZJfLufs73dOk0XDpNjNOpys85rG1VVE+Ic:UZWtI6RkeeZJys73dOvXDpNjNe8NuF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfed35854e1e8c28e3b0a13bffc12555_JaffaCakes118
Files
-
dfed35854e1e8c28e3b0a13bffc12555_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ