Static task
static1
Behavioral task
behavioral1
Sample
31c65812f0cd00415439b05084eebd20_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
31c65812f0cd00415439b05084eebd20_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
31c65812f0cd00415439b05084eebd20_JaffaCakes118
-
Size
186KB
-
MD5
31c65812f0cd00415439b05084eebd20
-
SHA1
ad47c221b2b720bee45a4b8edfb0481fe841a263
-
SHA256
2ef200f5dbcd04af4ef00fcb72a89019f07417cc7afc124d09c1688a54d82ce9
-
SHA512
32120c4df1d4cd112bdb85d3dcdcbe6be121cbc20ec5784f1f210c0ef9ca8dc4e9248c3feb5c0223f6640072dc3797d837917b4855044fba878488615115b1a5
-
SSDEEP
3072:4aLLs1Bcj/WxmGwD+lOljbTKi4lBvojaazd4GwCOumovjp0qTjZ8QBVCsg4P3uUG:4aLLs1C/9GY+Kj6i4lBvoZz4COwvjp0d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31c65812f0cd00415439b05084eebd20_JaffaCakes118
Files
-
31c65812f0cd00415439b05084eebd20_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 648KB - Virtual size: 647KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 47KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 312KB - Virtual size: 311KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ