Static task
static1
Behavioral task
behavioral1
Sample
95af13267eadfcca0da0fd12de3e1df8_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
95af13267eadfcca0da0fd12de3e1df8_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
95af13267eadfcca0da0fd12de3e1df8_JaffaCakes118
-
Size
44KB
-
MD5
95af13267eadfcca0da0fd12de3e1df8
-
SHA1
9730c6d0a7af2f0056ca183d5f11db396f948d24
-
SHA256
f5b32c7508ebfd33e64ebe7c733bcddbbb723f0f660d3418f17134a544491283
-
SHA512
27d612cf3131bc0a643d64ca90bd1ed27161d18a45f5e8b4576b1bab7ff946ef1c2133c495ce11865195804e7fdfc82a961ec4424f35de87fe9d790c4e0a9702
-
SSDEEP
768:TsZkx8Gw/Un/b4uY7Dj/JuKIc9GoBbvocKZY/XEIpY4/Ru:T/80/E1rpGmb9KZY/XEIu4/M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95af13267eadfcca0da0fd12de3e1df8_JaffaCakes118
Files
-
95af13267eadfcca0da0fd12de3e1df8_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ