Static task
static1
Behavioral task
behavioral1
Sample
2523926f938890f667355b062e118c95_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2523926f938890f667355b062e118c95_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2523926f938890f667355b062e118c95_JaffaCakes118
-
Size
95KB
-
MD5
2523926f938890f667355b062e118c95
-
SHA1
516d38738088c672deee2286b19a84bbf4b425d2
-
SHA256
79ba6dbe1b71375ba2252f7ac99f9883234e03114c85c13ae1c5b5bdc1f8e0bc
-
SHA512
986d1c878ec1ec754091e1caef05159bccfc7d6e2dbaba0e7d7a269c964b0cd662cd2ac59ea70d41381f10ce74fd1a3926ba12d43c46d5a0c7b301380cc30995
-
SSDEEP
1536:rQ2ST7S1gkksioQyQJlEISe1NCeEbV44CR1RnTOmSz:XcoQyQrEIS6EbV6RrTa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2523926f938890f667355b062e118c95_JaffaCakes118
Files
-
2523926f938890f667355b062e118c95_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 668KB - Virtual size: 668KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 183KB - Virtual size: 182KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.6MB - Virtual size: 19.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ