Static task
static1
Behavioral task
behavioral1
Sample
7b433fc3318c3212df96ce5a24a3ae24_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7b433fc3318c3212df96ce5a24a3ae24_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
7b433fc3318c3212df96ce5a24a3ae24_JaffaCakes118
-
Size
11.1MB
-
MD5
7b433fc3318c3212df96ce5a24a3ae24
-
SHA1
ae61afa0348542f673903aee3fc1f0343ef7fff0
-
SHA256
85ed2fc3b36b93d9412bec7c95ffeae40c6ed1a0fe2895f160fdf4571cd5eed0
-
SHA512
c586825288883a9d810c1538efa1e88e5b6c19c8d88468352b4903309f9db6463d55b867ab45a5febdd6c7aa93271e0fbf5b3c38810463e85b165a8ae5a93c7b
-
SSDEEP
196608:96fBp2Qddh3WaaSMTLqonK8GsBrFBU3Xy4Bam1u1907EmXZ5F1fEeKOJH:9a2QddtWaHMT+Appg3jh5F18YH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7b433fc3318c3212df96ce5a24a3ae24_JaffaCakes118
Files
-
7b433fc3318c3212df96ce5a24a3ae24_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ