Static task
static1
Behavioral task
behavioral1
Sample
f328c80f4dee01fc69fad2bf7b2c48b3_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f328c80f4dee01fc69fad2bf7b2c48b3_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f328c80f4dee01fc69fad2bf7b2c48b3_JaffaCakes118
-
Size
100KB
-
MD5
f328c80f4dee01fc69fad2bf7b2c48b3
-
SHA1
c46a75b803a562068a56de96db47a8df5cabff1b
-
SHA256
e6884db6354a9ebb8580c0b81d441b3cdf572e67c25bd99f780f6b3125731a37
-
SHA512
5d00ec0541814b0cf99683c6493987eedf01f60c47ccfe825651f0885a66b547fce4d9e36ca8d3ae663ba2ac3f4c775f7568207542d015c71b23058642453016
-
SSDEEP
1536:VijV+RulWJmgEQBbzepMFaMxkn8IYbII5pWBeutRD5ooU85evxvyY1+:IV+ROWEgvTA84IjWjlupTvQx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f328c80f4dee01fc69fad2bf7b2c48b3_JaffaCakes118
Files
-
f328c80f4dee01fc69fad2bf7b2c48b3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 428KB - Virtual size: 427KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ