Static task
static1
Behavioral task
behavioral1
Sample
291a70402e776e2c6fb56955cb85f162_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
291a70402e776e2c6fb56955cb85f162_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
291a70402e776e2c6fb56955cb85f162_JaffaCakes118
-
Size
2.0MB
-
MD5
291a70402e776e2c6fb56955cb85f162
-
SHA1
0fff7a1a86718f4213809a234ccb151b7c80bfdf
-
SHA256
17d5be21ef185eede1b80a3acce8c55caeedf237914ce8c4ffd5ec8d1ed82143
-
SHA512
a4ab984fff0ecba63cac9f55d9131a94546030d6004903eee3044b4cfdcadd1e92e4cefc12a4d58611f3d3f94fd488ef3ca45614a1a4dbcbb5d2a4e247482270
-
SSDEEP
49152:UScTo86RlkU46mzY4sCnldwPv1TtHvp02ZblwkWG7JeSiPsli:8THiW6IBTuHvplEkWGgSiP5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 291a70402e776e2c6fb56955cb85f162_JaffaCakes118
Files
-
291a70402e776e2c6fb56955cb85f162_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
nhsgpfne Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zuokkhbi Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ghbehmzc Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mddcpxby Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE