Static task
static1
Behavioral task
behavioral1
Sample
0533b69d741773439f14d7808e58c559_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0533b69d741773439f14d7808e58c559_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0533b69d741773439f14d7808e58c559_JaffaCakes118
-
Size
685KB
-
MD5
0533b69d741773439f14d7808e58c559
-
SHA1
0e18afa8cb2f24798fdb1651d71d19b42d40e744
-
SHA256
4a408a2e04873171627e27a9a20104897532a89047a9270e74f1f093a58d96dc
-
SHA512
c83c4449b8bca37804b0ff4b4c9b4cfb0b41c9283d378ab425e3ce1144821f82c8421525df32eb525a80ecb2b3f95ef46016bf76e6870d4275e44ebcd4266159
-
SSDEEP
12288:YQBB+PpV8eiQIHprnZb27VNLpHGgmzkF3Z4mxxGtBfuTGKExGRZSon:YRviNHFnZyR3Hk4QmXimTkID
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0533b69d741773439f14d7808e58c559_JaffaCakes118
Files
-
0533b69d741773439f14d7808e58c559_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 369KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE