Static task
static1
Behavioral task
behavioral1
Sample
1b2d4ce80e587489b4650b52bea03015_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1b2d4ce80e587489b4650b52bea03015_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1b2d4ce80e587489b4650b52bea03015_JaffaCakes118
-
Size
521KB
-
MD5
1b2d4ce80e587489b4650b52bea03015
-
SHA1
62b766fd1eae1bfcd0c7bdcf7cda4aa4db31c3fb
-
SHA256
e467171ebbb2b43d0f21a080e6d0cf8dfe4e98278229d3d11007889e29d83ac7
-
SHA512
659f1e6fb89ae5a82d09174077508984b016605a190098829a770c9f61507acbaf92385d3cac3b2e0077a0c1ceb20412f57f02e6a8bf031ea19a0330e6eb73b9
-
SSDEEP
12288:guNaQBRQxG1Q76g5T0F3Z4mxxTC39fhr+eee+2UkoOT3:Ftexey6g5oQmXeN5rjeMoOT3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b2d4ce80e587489b4650b52bea03015_JaffaCakes118
Files
-
1b2d4ce80e587489b4650b52bea03015_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 205KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE