Static task
static1
Behavioral task
behavioral1
Sample
f3f6834f84815f121317f742106f24db_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f3f6834f84815f121317f742106f24db_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f3f6834f84815f121317f742106f24db_JaffaCakes118
-
Size
832KB
-
MD5
f3f6834f84815f121317f742106f24db
-
SHA1
d9f5d49ecad323a0f19c988e4b13722da21aff8d
-
SHA256
56d67ac000de2f8eacc1c81a86321d0381b5ef934fc8042e975167d82f26aabe
-
SHA512
9203653217010e725a4728f48a9ac3cd719f506d7ac41c7607f0a56c43d4bc0c39b9f48067788c5d0fc5e61211291bc80de8051716af788caa2e8b829af5029d
-
SSDEEP
24576:vglfr1VOVWZHyZX9fSjLZ5REqmdFAGCEUm38G4+:vqfrwnqjLZ5REqQum3nH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3f6834f84815f121317f742106f24db_JaffaCakes118
Files
-
f3f6834f84815f121317f742106f24db_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 700KB - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 135KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 271KB - Virtual size: 271KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ