Static task
static1
Behavioral task
behavioral1
Sample
088072641922f80a5b976da237294b7e_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
088072641922f80a5b976da237294b7e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
088072641922f80a5b976da237294b7e_JaffaCakes118
-
Size
247KB
-
MD5
088072641922f80a5b976da237294b7e
-
SHA1
691bbcf53b0748d27fe0254c03ee1382272994d9
-
SHA256
cd6b88c585f1b57e52f47f7cc00a624c39f5b1320dfff57ce3497b7bb514e936
-
SHA512
8f3f8d944c6de9f85ce1ef9d94f201a8491e999f32c446d198b896c11ec86ba9d734aa9cd6674313f75e287cedb3221ff6968731b789b48ca00f3979b6ab6133
-
SSDEEP
6144:LDKatDuUAGiZq7z2wCgfravpFvmyQR5ShjJ2XrA:zoUAXZUzluvzOnA2bA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 088072641922f80a5b976da237294b7e_JaffaCakes118
Files
-
088072641922f80a5b976da237294b7e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
rnylcegr Size: 251KB - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
paqkxdtg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wbpyojua Size: 561KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uwntzfyl Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE