Static task
static1
Behavioral task
behavioral1
Sample
1c4ead5e20d9f5a9cf59bc2fa7fad070_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1c4ead5e20d9f5a9cf59bc2fa7fad070_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
1c4ead5e20d9f5a9cf59bc2fa7fad070_JaffaCakes118
-
Size
239KB
-
MD5
1c4ead5e20d9f5a9cf59bc2fa7fad070
-
SHA1
cb4844c8420bc6d29386e840f2b55f3014e41cd0
-
SHA256
df53b726f46baad0ad34f80104047a51bb6c79b947ccc705d04e58474e70a4d2
-
SHA512
2643a29adc1eff0e9d68857725df08652897cd1c66ae931514e448dbea74995f0ab242c30deab0e1f6b30380ad3efd7634e78d3da42c22b17eb0a9a8cc7c6072
-
SSDEEP
6144:vgQL+r41pmxSeHsBe67HutOECeOIv2Qv/iJqNHj4dFiPieGY:v/Cc18xSeHsASECeOa2NqND4dFiPieGY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c4ead5e20d9f5a9cf59bc2fa7fad070_JaffaCakes118
Files
-
1c4ead5e20d9f5a9cf59bc2fa7fad070_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
_<[vmO Size: 194KB - Virtual size: 193KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ