Static task
static1
Behavioral task
behavioral1
Sample
374dc06b976559ae80c349d058eb1c7c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
374dc06b976559ae80c349d058eb1c7c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
374dc06b976559ae80c349d058eb1c7c_JaffaCakes118
-
Size
689KB
-
MD5
374dc06b976559ae80c349d058eb1c7c
-
SHA1
df33e1efb2703d9b5d7cc9f2145fb02cf49487b4
-
SHA256
9e671d7cd10dc346bae20b609aee9cea06ac725307f152c881237e2ca1e72ca6
-
SHA512
6cb8fb1bb044079da25260457fa7a1c69c43fa1d7a9e714e9f8be5cc07c3989fe1d28bea66b72727c22ac434c65f4efd8aba4d8c91744927e3b5ccdc76a1159c
-
SSDEEP
12288:o9WQkCKbTQVHrcwDwWuDZWVz04yeF3Z4mxx9DqVTVOCr:o9WTQVHvD35QmX8VTzr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 374dc06b976559ae80c349d058eb1c7c_JaffaCakes118
Files
-
374dc06b976559ae80c349d058eb1c7c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 373KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE