Static task
static1
Behavioral task
behavioral1
Sample
181e264fe3ad23e222c7280e762d6d6f_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
181e264fe3ad23e222c7280e762d6d6f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
181e264fe3ad23e222c7280e762d6d6f_JaffaCakes118
-
Size
37KB
-
MD5
181e264fe3ad23e222c7280e762d6d6f
-
SHA1
2f1beaa400f54763005e7996cf7750a939e86dfe
-
SHA256
05ee5143078d344324dc780a633842cd9a9df9c9c41d320b8557b129d4c23b52
-
SHA512
241134923dd5158bc38fbb4636ec5428b9468a48485b289080745d70b58023c81e85f8805c7dd296c17294fc2b248e1c42a0ade19acca5d652f36210c27bc76f
-
SSDEEP
768:08EzNOTcvI4XY9ZLSpG4XkxXl0GdI2FwPyNqPdERh853Iql8Gdv:0xp7YnLSpGqkxSyoow4PGdv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 181e264fe3ad23e222c7280e762d6d6f_JaffaCakes118
Files
-
181e264fe3ad23e222c7280e762d6d6f_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 668KB - Virtual size: 668KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 183KB - Virtual size: 182KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.6MB - Virtual size: 19.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ