Static task
static1
Behavioral task
behavioral1
Sample
845d8a9568efd9d73c35c31dd38ea517_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
845d8a9568efd9d73c35c31dd38ea517_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
845d8a9568efd9d73c35c31dd38ea517_JaffaCakes118
-
Size
46KB
-
MD5
845d8a9568efd9d73c35c31dd38ea517
-
SHA1
eff6078bd63446163c9ad83ae58c61223802da76
-
SHA256
c4e76eea0a41413da79bdbae9f2f553e7bf2b4b86709b0d55eea2cb5981a2e2b
-
SHA512
39b14adc843f10a503aec620fedf9db9110aef67f00b4bea0a8e395ec1ea8aab7b205db9abfc61a3fee0f898776b16c8192318d20bf4388deaf15312d76eb29a
-
SSDEEP
768:2eyPauVpbt9FurfTGKdtxEcmbXSEO5/edvQ4GXX+HEfWQvmjAHUH6fHlUo5s1oaf:JPkqrGpRbiRGdI4iCEfDvPqaGo5s1oyd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 845d8a9568efd9d73c35c31dd38ea517_JaffaCakes118
Files
-
845d8a9568efd9d73c35c31dd38ea517_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 698KB - Virtual size: 698KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 75.8MB - Virtual size: 75.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ