Static task
static1
Behavioral task
behavioral1
Sample
5bbc9208399fa2396cbf1699809995b0_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
5bbc9208399fa2396cbf1699809995b0_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
5bbc9208399fa2396cbf1699809995b0_JaffaCakes118
-
Size
975KB
-
MD5
5bbc9208399fa2396cbf1699809995b0
-
SHA1
49a6055f83048dcd6f5e6e81bab887f119a35f23
-
SHA256
07144fa5814e85da48ffb9b49546a23d5c45f6e14e2d6e63730ce623a093caf5
-
SHA512
e01bf327bb6c675bdead50cd994bb15efdcdd3068bf1bfd882260beef8e8ba080c452e64b83c0cd3984242924529d7d68710ddd99ee9ffd8dc17ea28a26bfc27
-
SSDEEP
24576:VS2dvNCH4Qk5giP5fpNAa+oMIIvs13HzKeIQVUtE:PlQ2gEfp2a+dIIC3HeuUtE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bbc9208399fa2396cbf1699809995b0_JaffaCakes118
Files
-
5bbc9208399fa2396cbf1699809995b0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ