Static task
static1
Behavioral task
behavioral1
Sample
14f8f51f95e9771aa84f56ec19ffe27f_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
14f8f51f95e9771aa84f56ec19ffe27f_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
14f8f51f95e9771aa84f56ec19ffe27f_JaffaCakes118
-
Size
601KB
-
MD5
14f8f51f95e9771aa84f56ec19ffe27f
-
SHA1
02fab95552bd00330a67b7774006fc500b14fc54
-
SHA256
a8c30f4ee4b64fe11e7d4adc06cc017515aeef3ec2de12f579cee07c85ad3c8b
-
SHA512
3069d5d9ac101d73bb4e5fd77b946238e368acea8c42001503671772b7bf98244cfbd4dd068a9fac7fc1564e36fa13454b2d23a2ecb34d2dfa01242b81b6d8fc
-
SSDEEP
12288:ehNz/v11N7xMoqiY8yqhC4gRXjqUI2m+BdHuv:s/vDN9MzTACxU+B0v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14f8f51f95e9771aa84f56ec19ffe27f_JaffaCakes118
Files
-
14f8f51f95e9771aa84f56ec19ffe27f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.1MB - Virtual size: 8.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE