Static task
static1
Behavioral task
behavioral1
Sample
7a4718210ebfd84e19056529fe00d55a_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
7a4718210ebfd84e19056529fe00d55a_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
7a4718210ebfd84e19056529fe00d55a_JaffaCakes118
-
Size
1.6MB
-
MD5
7a4718210ebfd84e19056529fe00d55a
-
SHA1
c250f99d90a0d8798f7ec2715c149bc671e12f2f
-
SHA256
4494b35ff4f9754be4dd774b0c0887a21d9d04f376f5a34d0680832c9d59447e
-
SHA512
e580ab1c23a66f7b71e41b965a14f2b814341617f1e4484aef035b78aad274ff4009149a9826f2773462c3b82ae2f6d85e1872a8f65d6f38cb4fefe470ca472e
-
SSDEEP
24576:fro60/eEXjUjlbEMn8DqZsvM232CuOYehQ3SyiuHI+nVygRs7l:f07VjUjlbEM8DqZT5Cu2U15S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7a4718210ebfd84e19056529fe00d55a_JaffaCakes118
Files
-
7a4718210ebfd84e19056529fe00d55a_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ