Static task
static1
Behavioral task
behavioral1
Sample
77b9c4342d81b64248f3f8111699ef30_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
77b9c4342d81b64248f3f8111699ef30_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
77b9c4342d81b64248f3f8111699ef30_JaffaCakes118
-
Size
118KB
-
MD5
77b9c4342d81b64248f3f8111699ef30
-
SHA1
61163d6fe6126f1d386af17fb620c15eab483bb7
-
SHA256
420469da49baf616368cbefe8b23b73cb8d5bd743708a818d45431cce79f1f22
-
SHA512
3395068bd433330b22e2dae8beadbeb8432a585dfc43d879617ad6bee654354169f8271815669e18d33ac07e5555f09b9b83bae43363bd19ef207f9446b93534
-
SSDEEP
3072:4YP2XerzhOUxu/XU69iUx7VFgaZa+oGaed:4u2urzh9xu/Xn9iUxhFgaZfopU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77b9c4342d81b64248f3f8111699ef30_JaffaCakes118
Files
-
77b9c4342d81b64248f3f8111699ef30_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ