Static task
static1
Behavioral task
behavioral1
Sample
e960b4fd6eed3d08da78032ba171d9f3_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e960b4fd6eed3d08da78032ba171d9f3_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
e960b4fd6eed3d08da78032ba171d9f3_JaffaCakes118
-
Size
84KB
-
MD5
e960b4fd6eed3d08da78032ba171d9f3
-
SHA1
c1d124d030affd25084ec714a36614e1537921d1
-
SHA256
e9ed0719a6997bd6d7e8c9853961783840e6a6e17bca49c3210619a77e60b9a7
-
SHA512
fde4ffa9c8a44408b2356b1b7e35c4b9862e76559ca638c5d6618477b11d6d5b50e3289278765cc7545649646a10db19edb57d4ea2478b78b767eb72d7c70865
-
SSDEEP
1536:YyeLQnk+1jlkCI1A+vhUBOhwWiiksVUjGSEUwrgIQP9:Csky+1A+vhUMNibq6GSvQzU9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e960b4fd6eed3d08da78032ba171d9f3_JaffaCakes118
Files
-
e960b4fd6eed3d08da78032ba171d9f3_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 660KB - Virtual size: 660KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 181KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.3MB - Virtual size: 19.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ