Static task
static1
Behavioral task
behavioral1
Sample
1b11259caaaa12a9591b7611dcc90af2_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1b11259caaaa12a9591b7611dcc90af2_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1b11259caaaa12a9591b7611dcc90af2_JaffaCakes118
-
Size
378KB
-
MD5
1b11259caaaa12a9591b7611dcc90af2
-
SHA1
b1582f5eb9c7e8a47aefd6a6c73432925ccb1994
-
SHA256
c7b63f0e3d9a583d922c412cc69688e5f9f2bae5c03d53af25d4406ce7ee9f83
-
SHA512
713088cfdf59df71ec9da2738534f3ebfd469bd9de68f918f3d15fc377bf5b4338e5d5846dfe39a4549914ac613c3419cf8a9eac9d5ac8913290adfeda2a1ddd
-
SSDEEP
6144:tCxfZXckWcboXqMgJhsK2msUvcyvAvZz4dVhdv1kogQfbfg65tr5vzbtiRWAD:OXbYrQzRnAvZz4Ft1CQDoMNvzbth+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b11259caaaa12a9591b7611dcc90af2_JaffaCakes118
Files
-
1b11259caaaa12a9591b7611dcc90af2_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 81KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 296KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE