Static task
static1
Behavioral task
behavioral1
Sample
00a5cb48d485afbb02724f96339348c4_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
00a5cb48d485afbb02724f96339348c4_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
00a5cb48d485afbb02724f96339348c4_JaffaCakes118
-
Size
496KB
-
MD5
00a5cb48d485afbb02724f96339348c4
-
SHA1
837332c01eaa0dfe961d3523a9aa3add3f396bcd
-
SHA256
2670f448f300d118417dec945bb4205d2726c0d86eb12f6b40d3bb8ed79dc994
-
SHA512
70621f0cc7b6fd38149340f6c94e2f442a4c302a3e147868ff0003810ec45b418915bf649f9a29bbdc7b8e3582891e0cc92fe70a54b335f1dd9da2045da39458
-
SSDEEP
6144:HsxiJ24rS7pPsqtSbNWucsqAHOzg+/NrwAXl06lkbwS9ds8uEliO6:HhZuRsrYu4fdwAXl06lrS+Eli3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00a5cb48d485afbb02724f96339348c4_JaffaCakes118
Files
-
00a5cb48d485afbb02724f96339348c4_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 362KB - Virtual size: 361KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ