Static task
static1
Behavioral task
behavioral1
Sample
077488efb88931d9833bc50c5a1346d8_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
077488efb88931d9833bc50c5a1346d8_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
077488efb88931d9833bc50c5a1346d8_JaffaCakes118
-
Size
61KB
-
MD5
077488efb88931d9833bc50c5a1346d8
-
SHA1
8909741a59a90b2b58c41fecc567d1839e9daf43
-
SHA256
485548e3f3d52018d275af4e3fdc227ae3f4be40298c5b9211f1eb80d624c5f8
-
SHA512
9c9ca8874d92b100c9ed6947a91bed73bcd29d05b2f56b4fe4535841bab0edfd0d68b906c9cda9302eda4d0c8d719578b491f5f1d2cb70e3fb766c2da0ea67e8
-
SSDEEP
1536:oNXoqQ623kO+3igl4V37uSOilWMPGx9qWPN0:dkJ3igmV3SLuWMOHqWP6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 077488efb88931d9833bc50c5a1346d8_JaffaCakes118
Files
-
077488efb88931d9833bc50c5a1346d8_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 662KB - Virtual size: 661KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 181KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.6MB - Virtual size: 19.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ