Static task
static1
Behavioral task
behavioral1
Sample
a497ed3807478e7c21c70dcd6dfdc614_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a497ed3807478e7c21c70dcd6dfdc614_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
a497ed3807478e7c21c70dcd6dfdc614_JaffaCakes118
-
Size
150KB
-
MD5
a497ed3807478e7c21c70dcd6dfdc614
-
SHA1
31c6c209500798d06c929b5284349ce62490887f
-
SHA256
9acd9918722f7585436ed3f64e8d1a0ce82b59973735d91bce907530837f55f2
-
SHA512
f22da19561f570fd566d816b7afadda9b09b11398390036f89949728176a1c848cbcdd7263910e0dee9a5e7e059ab6a8552f23e7398c0037cea6cd57eb38f49b
-
SSDEEP
3072:bvj6VPnulOoqitWG6nKRhBoFbva1ieRqNcDtFCpMagWh+:+Pu1QGfkbaQPcRFBsM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a497ed3807478e7c21c70dcd6dfdc614_JaffaCakes118
Files
-
a497ed3807478e7c21c70dcd6dfdc614_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
BSS Size: 112KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ