Static task
static1
Behavioral task
behavioral1
Sample
260833c8981a31d851b86c2e43856f73_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
260833c8981a31d851b86c2e43856f73_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
260833c8981a31d851b86c2e43856f73_JaffaCakes118
-
Size
121KB
-
MD5
260833c8981a31d851b86c2e43856f73
-
SHA1
93dbcb284be343506f9603a4b940c376b9d88218
-
SHA256
8ac7ebe17f9c4d4b86b798a936e488e01ab75c8e9b8d48ddb08e7dcec58ce448
-
SHA512
ab78141a060a70ad54d2f44f9dcb06280117da7da627501eb6a7829b7327f559089135705b60c5248f7c3bf55ff46b1be9bdd467e9b61b612ddc0952fb11ad0f
-
SSDEEP
3072:NRaMqB5SZtCfs16O0iFdYcnYB64PchzcGh:+MqB5SZQ0Ci/YcYB6RhzZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 260833c8981a31d851b86c2e43856f73_JaffaCakes118
Files
-
260833c8981a31d851b86c2e43856f73_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
CRT Size: 92KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ