Static task
static1
Behavioral task
behavioral1
Sample
1a23236e3935ab3ab6dd7062fdd87b6c_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1a23236e3935ab3ab6dd7062fdd87b6c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1a23236e3935ab3ab6dd7062fdd87b6c_JaffaCakes118
-
Size
49KB
-
MD5
1a23236e3935ab3ab6dd7062fdd87b6c
-
SHA1
22301fd1df6a41588ca0b7b6f6d50543e030c7f7
-
SHA256
7c947875d2ac324266ca2ed696b9c38928f2825daaee7fb3dd93018589b11ced
-
SHA512
5f3bb6c758843d0857123fd1843641261d068ac2a3f55bf99b943129e402dbb81cc2ad01a4739f3cb364e2f733b8661ba84c441f4b2d27ae67855a2f58d5cbc4
-
SSDEEP
768:duKgIEJ+LoUxv5HSgPWRNBv4jepRcDdXNY7h899uzRe/OVTK7P/rrn:duKgI5pjURAje7wdS89og/qTKXD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a23236e3935ab3ab6dd7062fdd87b6c_JaffaCakes118
Files
-
1a23236e3935ab3ab6dd7062fdd87b6c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vdsv Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PEPACK!! Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dvsvpt Size: 96B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vsd Size: 114B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ