Behavioral task
behavioral1
Sample
4ab2ae7fbc556df227f9273e8e4766c1_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
4ab2ae7fbc556df227f9273e8e4766c1_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
4ab2ae7fbc556df227f9273e8e4766c1_JaffaCakes118
-
Size
2.5MB
-
MD5
4ab2ae7fbc556df227f9273e8e4766c1
-
SHA1
358a5176cf940af64e4ccfbb69ebd4d6b9e2e2ad
-
SHA256
ebbe10c35bc8e69e6ecca1d20669f21aea2c6d1aa2cca1355c6ceb7734fb3ee2
-
SHA512
944b5331c930da86b240128e7809aa19b73b5f18a63d55c3a6c773ff22c02d2e10e1d2eb6d4a08567e3107b54e52368c94a9a9cb3b71238ccd72d8679cf7d00b
-
SSDEEP
49152:67Jh97/3cvUknYyMfT3R2tzOQrvgCCzW6zV6sVAVKL+GsVngdrYoy7BhQxtLaenJ:6RfTazOQD7AW6zVbVAVKL+GsVngdrYod
Malware Config
Signatures
Files
-
4ab2ae7fbc556df227f9273e8e4766c1_JaffaCakes118.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 373KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 272KB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RANDOMX Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ