Static task
static1
Behavioral task
behavioral1
Sample
b22c6493ff49a4adb7ac368281e5bcde_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b22c6493ff49a4adb7ac368281e5bcde_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
b22c6493ff49a4adb7ac368281e5bcde_JaffaCakes118
-
Size
9.0MB
-
MD5
b22c6493ff49a4adb7ac368281e5bcde
-
SHA1
8dde5349f95f797ccf07469c70164656fbb8c403
-
SHA256
fa0329d536ea98177fc43cf384bfb4558438e5bb5147f83f3f905577af3c1ace
-
SHA512
940a7729540f68e0b0dfd9a1d0701dfed8351339ca9878375dcc5b4c397c7fdee0dcaf91f5841b1121562a02b4f4e980868e5385ddbf1172eb7e90b6f45ddcae
-
SSDEEP
196608:ajaRQ10I+obJrHuQaRZeTV3Ffgwg6mWcvG4fqyyQMVdkgSja99aw:V+10I+JQeenfgwg/bVxynVegSO99T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b22c6493ff49a4adb7ac368281e5bcde_JaffaCakes118
Files
-
b22c6493ff49a4adb7ac368281e5bcde_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
PFV0 Size: - Virtual size: 6.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PFV1 Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE