Static task
static1
Behavioral task
behavioral1
Sample
953fa5e0b0a9b20ddcb95af9fd4bc129_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
953fa5e0b0a9b20ddcb95af9fd4bc129_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
953fa5e0b0a9b20ddcb95af9fd4bc129_JaffaCakes118
-
Size
368KB
-
MD5
953fa5e0b0a9b20ddcb95af9fd4bc129
-
SHA1
c46b5f6c79636707fe71fbb2725cd2747668d178
-
SHA256
0800953d109f9f4a3f854704b8a4a6823ffc19e4190edf4a3743b95732d663e8
-
SHA512
6976253ddc27dd3e16102f6755a55dd557d6f61609ce7a16e366a8768713c951fddb06c77c09d1f5f853d80bc6b8b251f75d1dd14677f9325789be1506a67fc3
-
SSDEEP
6144:211rg9/dHIm5gx8ISWIrPTka9ZhuGQT2+LwTdSv+qEMxpASjTnrJ:2c9/um5i8ISpkcxeAF4xpASTJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 953fa5e0b0a9b20ddcb95af9fd4bc129_JaffaCakes118
Files
-
953fa5e0b0a9b20ddcb95af9fd4bc129_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 206KB - Virtual size: 214KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ