Static task
static1
Behavioral task
behavioral1
Sample
a50d85a4503ef9cbc63993653af9cd59_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a50d85a4503ef9cbc63993653af9cd59_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
a50d85a4503ef9cbc63993653af9cd59_JaffaCakes118
-
Size
57KB
-
MD5
a50d85a4503ef9cbc63993653af9cd59
-
SHA1
3afa8275663fd5bf20c78d2bd36fc0bbf327b627
-
SHA256
6c451093c2c93be651487b66213c9cb0be50d717d7e2a83df2d6e135e39cdc3f
-
SHA512
01b406268b83406bcb6b0e86ff3ff7a2a4fb0fa44fd2244484d9df761b7fc13fa207725198172e83049bd964afe0cc78158708c46534a6da0dc7d4c39f45ddb9
-
SSDEEP
768:dukxEhl/Un0VB8uyoCrJuAFSp9sLoBbvocKZY/XEIpY4/RAFiNscaL7X5:dFE+0IBrIsLmb9KZY/XEIu4/UiCTz5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a50d85a4503ef9cbc63993653af9cd59_JaffaCakes118
Files
-
a50d85a4503ef9cbc63993653af9cd59_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ