Static task
static1
Behavioral task
behavioral1
Sample
051de82cac96e1c0dd2e93e24e750cde_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
051de82cac96e1c0dd2e93e24e750cde_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
051de82cac96e1c0dd2e93e24e750cde_JaffaCakes118
-
Size
687KB
-
MD5
051de82cac96e1c0dd2e93e24e750cde
-
SHA1
a673d128051292e7802db673d6162b8c38780806
-
SHA256
ddb0a8e955236c88911ef639daf48fed66ab4d323497a222f590c46da003f16a
-
SHA512
cac067ee876f6a308ccf26f6352d5aa57bbd910875037632b9fc32bf9ecc4dfc44fb54e4ebb07febd4fa3d0c20c93e54d38bfd7100013772152970ae614d8fbf
-
SSDEEP
12288:+pwVhywotwboiJrMfVC3rd/n5z4Mm2+LqF3Z4mxx9DqVTVOCL:ewVhyORUVC3NnlfFGqQmX8VTzL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 051de82cac96e1c0dd2e93e24e750cde_JaffaCakes118
Files
-
051de82cac96e1c0dd2e93e24e750cde_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 371KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 315KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE