Static task
static1
Behavioral task
behavioral1
Sample
07134ee186c13677d785d40bd56cbfde_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
07134ee186c13677d785d40bd56cbfde_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
07134ee186c13677d785d40bd56cbfde_JaffaCakes118
-
Size
340KB
-
MD5
07134ee186c13677d785d40bd56cbfde
-
SHA1
c09810df049c823bdfcb0c14feab2db26d26af81
-
SHA256
10ef0db92b97ace3596d4c0ed309e04bb5410be2904da22240a098d26c24eb90
-
SHA512
7b4f54a9f11b06318ebea83b4c5b5eea9f920310c089c5febf6e5bfaf74167a79a521e9f4c416cc57adfcadb4744ddcaedc2662fd320bdd8b2dfe558ae744cf2
-
SSDEEP
6144:vpue2SCx02PKLWoxOROrxF2xfxuboAxg2U5VcZgPumzC/y/g6kTeLuYT3AtnpSGy:xuNxx02CaEOiMxubol35eMC/yIm/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07134ee186c13677d785d40bd56cbfde_JaffaCakes118
Files
-
07134ee186c13677d785d40bd56cbfde_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 14KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tqn Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE