Static task
static1
Behavioral task
behavioral1
Sample
74e2fe5deb763c58d212a7efd3f3001c_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
74e2fe5deb763c58d212a7efd3f3001c_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
74e2fe5deb763c58d212a7efd3f3001c_JaffaCakes118
-
Size
437KB
-
MD5
74e2fe5deb763c58d212a7efd3f3001c
-
SHA1
d1fb691247be072f169ea142f49dded06c6e4520
-
SHA256
82b17a7aed76e271cc5d26627eb84a998657903bac5f6ba1c109e11df9bf7aa1
-
SHA512
06dd6ad9633477b3906d1190c273592b17e19e105bce72e3b9472a7bfc05e31bf2eaa77e8d3206d707251bc1ee068b03ad754dbff160448e0839e412d1b3ed61
-
SSDEEP
6144:RSrUuHX7jBQj61e0Jz6H119A1/DXg/SwvZRQKwARuS:RmpL1Qj61e0ASDXg/SwZRhRuS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 74e2fe5deb763c58d212a7efd3f3001c_JaffaCakes118
Files
-
74e2fe5deb763c58d212a7efd3f3001c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 288KB - Virtual size: 288KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ