Static task
static1
Behavioral task
behavioral1
Sample
347f7769006665ab6f24697005b2f193_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
347f7769006665ab6f24697005b2f193_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
347f7769006665ab6f24697005b2f193_JaffaCakes118
-
Size
323KB
-
MD5
347f7769006665ab6f24697005b2f193
-
SHA1
2fa78986e49b2d98e29332ebc27c8a59d195830a
-
SHA256
cff70deec69bdb75f4ea9be39bb2b200b87741f96ec55cb702c43ad48df1e5c4
-
SHA512
4eb4e2347272769c779d9e8cffe8f8b56a622c05549a500cf10b2fbbb583717cc8685b59b5bdb8e40a20b5a2bcf672859d6240130f4e1f36cd83a6c30ef820c6
-
SSDEEP
3072:JgXdZt9P6D+wXJEZMGjhnaRButAK/jJM:Je3iAraRAj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 347f7769006665ab6f24697005b2f193_JaffaCakes118 -
NSIS installer 1 IoCs
resource yara_rule sample nsis_installer_2
Files
-
347f7769006665ab6f24697005b2f193_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 151KB - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
.data
-
.idata
-
.ndata
-
.rdata
-
.rsrc/BITMAP/110.bmp
-
.rsrc/DIALOG/102
-
.rsrc/DIALOG/103
-
.rsrc/DIALOG/104
-
.rsrc/DIALOG/105
-
.rsrc/DIALOG/106
-
.rsrc/DIALOG/107
-
.rsrc/DIALOG/111
-
.rsrc/DIALOG/202
-
.rsrc/DIALOG/203
-
.rsrc/DIALOG/204
-
.rsrc/DIALOG/205
-
.rsrc/DIALOG/206
-
.rsrc/DIALOG/207
-
.rsrc/DIALOG/211
-
.rsrc/DIALOG/302
-
.rsrc/DIALOG/303
-
.rsrc/DIALOG/304
-
.rsrc/DIALOG/305
-
.rsrc/DIALOG/306
-
.rsrc/DIALOG/307
-
.rsrc/DIALOG/311
-
.rsrc/DIALOG/402
-
.rsrc/DIALOG/403
-
.rsrc/DIALOG/404
-
.rsrc/DIALOG/405
-
.rsrc/DIALOG/406
-
.rsrc/DIALOG/407
-
.rsrc/DIALOG/411
-
.rsrc/DIALOG/502
-
.rsrc/DIALOG/503
-
.rsrc/DIALOG/504
-
.rsrc/DIALOG/505
-
.rsrc/DIALOG/506
-
.rsrc/DIALOG/507
-
.rsrc/DIALOG/511
-
.rsrc/DIALOG/602
-
.rsrc/DIALOG/603
-
.rsrc/DIALOG/604
-
.rsrc/DIALOG/605
-
.rsrc/DIALOG/606
-
.rsrc/DIALOG/607
-
.rsrc/DIALOG/611
-
.rsrc/DIALOG/702
-
.rsrc/DIALOG/703
-
.rsrc/DIALOG/704
-
.rsrc/DIALOG/705
-
.rsrc/DIALOG/706
-
.rsrc/DIALOG/707
-
.rsrc/DIALOG/711
-
.rsrc/DIALOG/802
-
.rsrc/DIALOG/803
-
.rsrc/DIALOG/804
-
.rsrc/DIALOG/805
-
.rsrc/DIALOG/806
-
.rsrc/DIALOG/807
-
.rsrc/DIALOG/811
-
.rsrc/GROUP_ICON/103
-
.rsrc/ICON/1.ico
-
.rsrc/ICON/2.ico
-
.rsrc/ICON/3.ico
-
.rsrc/ICON/4.ico
-
.rsrc/ICON/5.ico
-
.rsrc/ICON/6.ico
-
.rsrc/ICON/7.ico
-
.rsrc/MANIFEST/1.xml
-
.text
-
[0]
-
[1]
-
[2]
-
[3]