Static task
static1
Behavioral task
behavioral1
Sample
d2c7461e6a0dc1fac094be16154abc34_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d2c7461e6a0dc1fac094be16154abc34_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
d2c7461e6a0dc1fac094be16154abc34_JaffaCakes118
-
Size
1.1MB
-
MD5
d2c7461e6a0dc1fac094be16154abc34
-
SHA1
f3daea5b79903a0ffb4a7eb00a25e06598f4c359
-
SHA256
75bcf3a8bd7be1d578751b740f6d80e7713b97aac02ba47d8d2701b5ca44734e
-
SHA512
a56f135b80f6ef02614f06e630337a4b5c782afe83c5d761a775d97cc17f3bf7c9504694e61cda82fa18018c6a8f5fe2026074e6d2ef9cc77b9d500d5c507060
-
SSDEEP
12288:ZwCXnLquXU99IC4j7xrcqPkePh+RvMaBlYJQCe2m9Or:mFn9p4jFMePh+RpBlU69Or
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2c7461e6a0dc1fac094be16154abc34_JaffaCakes118
Files
-
d2c7461e6a0dc1fac094be16154abc34_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 813KB - Virtual size: 828KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE