Static task
static1
Behavioral task
behavioral1
Sample
169a4a591141803619ffb2124cc8f8fa_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
169a4a591141803619ffb2124cc8f8fa_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
169a4a591141803619ffb2124cc8f8fa_JaffaCakes118
-
Size
128KB
-
MD5
169a4a591141803619ffb2124cc8f8fa
-
SHA1
387b136656c962b7db3246c3483dff82e39ce0ac
-
SHA256
3ff352933048e695dc1242dab5cbbfdd0a7aca9a1fcc367517388c74c8995c5d
-
SHA512
1c063a4125651eb7e1085da1179ca443635ae7bb0a017f4576a9d6485574cc2b5f73bbff90eebabc6ff4dca4b6ac79c02352466fab6d84023408e9fb30bb9a13
-
SSDEEP
3072:G4xvm3agmtmiWbr+mkzm3mVm+mMmAmamKmHmARISUQsw9lnst4kme9dmhBmN:G4Z5gKnWbr+FzkyZb/RRwHRIS5mjtdEW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 169a4a591141803619ffb2124cc8f8fa_JaffaCakes118
Files
-
169a4a591141803619ffb2124cc8f8fa_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 5.1MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 911KB - Virtual size: 911KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 543KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 348KB - Virtual size: 347KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ