Static task
static1
Behavioral task
behavioral1
Sample
3112316087b9cedf1d07bf0a5160879f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3112316087b9cedf1d07bf0a5160879f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
3112316087b9cedf1d07bf0a5160879f_JaffaCakes118
-
Size
638KB
-
MD5
3112316087b9cedf1d07bf0a5160879f
-
SHA1
7acabbf127eae9b1af98d8886b605e147a315135
-
SHA256
89a021588f16d02409cab9e2dd637b3053c831130d8985b574e5bab42b12d31a
-
SHA512
8ed97b480c3ec6dbbe00744ea56983db653477646ab347780d4fe8c955119920969e3c0b17fc80ed77b3f262dcf2c6dd39efa50637b43111af814a6eeeccea41
-
SSDEEP
12288:gk7S0RIvWY+JrY9HHPutsLT0zmUuDmyDhhLvL91c2obY7xVwp/E0S:3kvJ+Js9Pu6TJUuDmYhhTdocFVes0S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3112316087b9cedf1d07bf0a5160879f_JaffaCakes118
Files
-
3112316087b9cedf1d07bf0a5160879f_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 374KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 262KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE