Static task
static1
Behavioral task
behavioral1
Sample
dfef476e9a1ad9273e12efd9be9d7d06_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
dfef476e9a1ad9273e12efd9be9d7d06_JaffaCakes118
-
Size
418KB
-
MD5
dfef476e9a1ad9273e12efd9be9d7d06
-
SHA1
0e95cda443e955eac6d10ff9ba4d6e3119be5358
-
SHA256
43db6a665181bb064290df35fae53e9206e125327ec1918e5c3c807eb953568e
-
SHA512
8cc7ba7b71936732208556c3982c60ab7d7a0a6367e8970dbb429a1076e5e4ae064ab7af3f8fc7de4021be1c2acf9f7f22a94a9c0387b2890c8c12ef9e7303e8
-
SSDEEP
6144:9h3PTgZ+u+CpliTw58xB8psDAo7HbD93XQAS9YK5fljNA3tS4TyQOGoQbwyUx/Fe:TPlOww58xK1UH5gflYjT0SuCtOngiMv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfef476e9a1ad9273e12efd9be9d7d06_JaffaCakes118
Files
-
dfef476e9a1ad9273e12efd9be9d7d06_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 157KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 232KB - Virtual size: 452KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE