Static task
static1
Behavioral task
behavioral1
Sample
146b6834c2a6a446183438ef982d1672_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
146b6834c2a6a446183438ef982d1672_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
146b6834c2a6a446183438ef982d1672_JaffaCakes118
-
Size
22KB
-
MD5
146b6834c2a6a446183438ef982d1672
-
SHA1
4208324328d2823f7e3ac47ba3d64f5ba4ad9aab
-
SHA256
151a92df1e7ceb6b3b81dbfda63faead4ef9859eeef6ab7ca5d283939d78babb
-
SHA512
dd335161114a94f686e91c12028169897e244d3a9dbcbccdb741eb81a9b7fd5f4ee0b718629451bd575e27726559315a1c96c7a04e4369d8ad739b26297899d2
-
SSDEEP
384:NTHauBV1/4n9yG1p8DTkbTD+a+beqTSX0APdtjsngDCzF:NTHaAVJ2NqT00sjIgWh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 146b6834c2a6a446183438ef982d1672_JaffaCakes118
Files
-
146b6834c2a6a446183438ef982d1672_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ