Static task
static1
Behavioral task
behavioral1
Sample
f6749396a9e5350eee268f83a97c1f68_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f6749396a9e5350eee268f83a97c1f68_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f6749396a9e5350eee268f83a97c1f68_JaffaCakes118
-
Size
59KB
-
MD5
f6749396a9e5350eee268f83a97c1f68
-
SHA1
a0a65c0cffa1ed10278ed8daff776f3e872739ca
-
SHA256
e615f44934176512a2d4c6cc5e5d3e6c5a3cd158c6205d4cee63130215b39bdc
-
SHA512
90efb366ebb98646097f1e5a056975ac63701f12440301252cd002c6e003f29844cdd05d25b1fec7c38dc2dd54f6113a6135445904628f401fd65b145c46a1a4
-
SSDEEP
1536:rxCmwq/FmRs7uBYgq3STl9ZVlcuQTpj7kyluFNStcvj:EmwTs7uiZ36l9ZHp87oUtcvj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6749396a9e5350eee268f83a97c1f68_JaffaCakes118
Files
-
f6749396a9e5350eee268f83a97c1f68_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 127KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ