Static task
static1
Behavioral task
behavioral1
Sample
14983f6110bf5a8df766e751a9dc9508_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
14983f6110bf5a8df766e751a9dc9508_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
14983f6110bf5a8df766e751a9dc9508_JaffaCakes118
-
Size
91KB
-
MD5
14983f6110bf5a8df766e751a9dc9508
-
SHA1
b8fa0bcd44feb91d3f7a27726d139752c55f7fce
-
SHA256
4928503f0c0f303f46b4721668ac88c4ca128fc1d30a9cb6bb0a95111f6ad93a
-
SHA512
07a2a82b3202db1cc87592e29f015fb30a8a9639825499522fbd060cbb67ab555dca9e5839a45648b1cd394aba20d18c6d504f2f68ddda2de02fa6720fa6739e
-
SSDEEP
1536:3Z1jRUD4p+f7+21uf61Wfn9617CSIO3+yTfF07K9:3jYh+DfWWw1Rl3jr64
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14983f6110bf5a8df766e751a9dc9508_JaffaCakes118
Files
-
14983f6110bf5a8df766e751a9dc9508_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 684KB - Virtual size: 683KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 163KB - Virtual size: 162KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 312KB - Virtual size: 311KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ