Static task
static1
Behavioral task
behavioral1
Sample
154937944e318f2e57a94ca01d362c7b_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
154937944e318f2e57a94ca01d362c7b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
154937944e318f2e57a94ca01d362c7b_JaffaCakes118
-
Size
42KB
-
MD5
154937944e318f2e57a94ca01d362c7b
-
SHA1
a8e77f06c352173197c2aaefb65229c7b2025404
-
SHA256
d5b0d26aaebd0a0e81ce4cb3e196a3d1ac41a8f0be5c78a7b47f5b1f2aa73c88
-
SHA512
3e77be76da64e079546d6ea0152313f24a7ee1b3949fbcac8f9cf5c9999f296e489b01d042d18804d9d22c70e3290f289c2ededff16f40ce22dcf1df3455ecac
-
SSDEEP
768:O09ooHa6uZgd7IYIxzkIZEuDINXpzo25rOT/GYkx57dvb+ZMjPoNaPHr7d9r0rw+:OUHCkI9DINXpzo2IrDknW/CPIvICux2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 154937944e318f2e57a94ca01d362c7b_JaffaCakes118
Files
-
154937944e318f2e57a94ca01d362c7b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 671KB - Virtual size: 670KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 190KB - Virtual size: 190KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20.3MB - Virtual size: 20.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ