Static task
static1
Behavioral task
behavioral1
Sample
058aa985ce9c06eee24d278469776aa2_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
058aa985ce9c06eee24d278469776aa2_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
058aa985ce9c06eee24d278469776aa2_JaffaCakes118
-
Size
689KB
-
MD5
058aa985ce9c06eee24d278469776aa2
-
SHA1
9ce51d75a5e6e29ad351af79c33770f00c79740f
-
SHA256
af08cf7d73d0835434b01b4b4dd00ee7eed598274732f84b9243a462276351d0
-
SHA512
67572cb018e505c9b8e8ee12e98ae295bb9fe89913e6378fd2697724ea8742f0c5bc9babb45865ce7d4ddc6c5342f8d1613aaff6d3f573977bdd5a8c2cf5cc3b
-
SSDEEP
12288:5d8p6VR2Y0ZfrrycXUOYk9/jkcJ2i0zUWLjzB2tF3Z4mxx+CG8F6umYVEExUlWfD:5CqkY0ZfrrycXUMjPY4WLfB0QmXdG8F7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 058aa985ce9c06eee24d278469776aa2_JaffaCakes118
Files
-
058aa985ce9c06eee24d278469776aa2_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 373KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 312KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE