Static task
static1
Behavioral task
behavioral1
Sample
08e903c73aa0fbfa9cd88a44e818bc48_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
08e903c73aa0fbfa9cd88a44e818bc48_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
08e903c73aa0fbfa9cd88a44e818bc48_JaffaCakes118
-
Size
1.5MB
-
MD5
08e903c73aa0fbfa9cd88a44e818bc48
-
SHA1
9f20f3b6cdfef588591ea7ad5ed8f56602e3173f
-
SHA256
f403210abb4b9f33e92421400db5750e23585401aeb6f14003e0d1df39f8cbde
-
SHA512
425eba53da6a034a35e9cd6c34e632454ff78e26bb59e3765408a0490a6b415ab6b3a66c9918406c98c9cabc4e5e99f3fc78896f6b3d735170d2a38468110590
-
SSDEEP
24576:WvdYAcUR0mSQOZJcDshAIQmQIIxVB9iLNUHUpHHPDrlkyKG:m1cHOOc6AYYxh4WaPDrlz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08e903c73aa0fbfa9cd88a44e818bc48_JaffaCakes118
Files
-
08e903c73aa0fbfa9cd88a44e818bc48_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1008KB - Virtual size: 1007KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 232KB - Virtual size: 231KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 177KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ