Static task
static1
Behavioral task
behavioral1
Sample
f72512e4b02b3c697349e99b956b6b97_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f72512e4b02b3c697349e99b956b6b97_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f72512e4b02b3c697349e99b956b6b97_JaffaCakes118
-
Size
55KB
-
MD5
f72512e4b02b3c697349e99b956b6b97
-
SHA1
f848ff1174566c5a2f36f9eee0fe90e9b3b08f72
-
SHA256
2c1aa5c5940ea13c3364631fc3a6b952dfa9799fabb46041bfd359740d5c813e
-
SHA512
e065eb15a460988103bd4c05ad59a1f68a38cb61815de9d074d46f228c3a123b750ee46b9a221d4ff09198fcbc5b16416d926bbc1fb666f88b0533d96fd6573d
-
SSDEEP
768:PmL7A0SAgNqieEPT3xUphBUvmFKXPVAb1/thTUTsTfvDebPO:Pmw0tgNqMPT3xU1UvacAb13TCsTvgPO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f72512e4b02b3c697349e99b956b6b97_JaffaCakes118
Files
-
f72512e4b02b3c697349e99b956b6b97_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
"#xT-- Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ