Static task
static1
Behavioral task
behavioral1
Sample
0a500dd92062134ccfe07b1e8cc611bf_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
0a500dd92062134ccfe07b1e8cc611bf_JaffaCakes118
-
Size
114KB
-
MD5
0a500dd92062134ccfe07b1e8cc611bf
-
SHA1
e3740ecb3c97cda6fd34d25bcfad90e9211b397d
-
SHA256
50a53de217c2a21c1fca34832d771ae48f89d8dfe1650b924313c1793afca646
-
SHA512
ca4ef30feb0853b77aa4502d1e1049a6a4d8613487ae95f9713d67930278483248b8d86ee4db5d943151d9f933120786983510fe8e5b71a3cb5956f022af4c7c
-
SSDEEP
3072:/XAtWYKBlVMPGswrC47B9lHjHn36moFW3TkppDxf9:fAoYKXVMLwG47dTX4Dx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a500dd92062134ccfe07b1e8cc611bf_JaffaCakes118
Files
-
0a500dd92062134ccfe07b1e8cc611bf_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE