Static task
static1
Behavioral task
behavioral1
Sample
0433a9fed93178b70765cab0edaedc7b_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0433a9fed93178b70765cab0edaedc7b_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0433a9fed93178b70765cab0edaedc7b_JaffaCakes118
-
Size
97KB
-
MD5
0433a9fed93178b70765cab0edaedc7b
-
SHA1
8b1c74b57bbab3957971dadfa27cdc3caad02d97
-
SHA256
884f4e2e2fc19b86f16cb706029759be64f7c69813b76c5177e9237d230d91f6
-
SHA512
2ba07d0c1d52a6faaf0cad4e395300200bc19b7ee0451732268942f86e3a5508dc1e3d871313489065ab0023507000901c251547931c35e97f973b8b1e3b8dfa
-
SSDEEP
3072:ySAzeihMSWZ8ISBl5EHZ24JCTYTrY7zXT:RihMjS1E44JCQrYHT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0433a9fed93178b70765cab0edaedc7b_JaffaCakes118
Files
-
0433a9fed93178b70765cab0edaedc7b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 111KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 346KB - Virtual size: 345KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ