Static task
static1
Behavioral task
behavioral1
Sample
229de532314f23eac3bf6e977ee4f9fe_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
229de532314f23eac3bf6e977ee4f9fe_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
229de532314f23eac3bf6e977ee4f9fe_JaffaCakes118
-
Size
75KB
-
MD5
229de532314f23eac3bf6e977ee4f9fe
-
SHA1
c625beca5a2df7ba9cb62f36ad866b75488de074
-
SHA256
093bd19789e92ff9270976c39e4585ce0ffdaad33efd80fc17b77f45acc61faf
-
SHA512
569586d115b56e853612277694ecb0455e98b0a7b599ebaeea6567c595f658bf781a89a21c04e848c5e9c468d2c22c6a65b4b131ec5bd43fd667f8995488d672
-
SSDEEP
1536:O96bq+91nioxizwg8LAlqVTY3cHIaJQ3sXcEscy1RUGo1NeeY:wx2Ri8gkZwI5JQ3P351RPorY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 229de532314f23eac3bf6e977ee4f9fe_JaffaCakes118
Files
-
229de532314f23eac3bf6e977ee4f9fe_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 21KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PEPack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xpr01 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE