Static task
static1
Behavioral task
behavioral1
Sample
18dee76df643946044c72d936cea8a06_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
18dee76df643946044c72d936cea8a06_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
18dee76df643946044c72d936cea8a06_JaffaCakes118
-
Size
128KB
-
MD5
18dee76df643946044c72d936cea8a06
-
SHA1
766f84ae07109f1c44ba947777ffd08f48bc6e85
-
SHA256
91a4edf09b3e6e60e8ea29859cf6005db194377cf9e3a568b897e9605f78d168
-
SHA512
7ec2d8472bc06398ea2cc55a07cc4e0bdbe1b5835b515d639c893db5897b2aa763f4eef53103cf7f7d85dc9c025f105fb16e36fbf68e35db4acab9f3fba06ea4
-
SSDEEP
1536:4fb390WkpzzWG9ye9+O84EhxP7IT9IQr6sNDAT/QEHt2nc:G21WGgk+ZTC9IQr6sNMT3N2c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18dee76df643946044c72d936cea8a06_JaffaCakes118
Files
-
18dee76df643946044c72d936cea8a06_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 632B - Virtual size: 632B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BSS Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DAT2 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 400B - Virtual size: 400B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 598B - Virtual size: 598B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE