Static task
static1
Behavioral task
behavioral1
Sample
389db651939799c268b6d8b725a94220_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
389db651939799c268b6d8b725a94220_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
389db651939799c268b6d8b725a94220_JaffaCakes118
-
Size
1.9MB
-
MD5
389db651939799c268b6d8b725a94220
-
SHA1
249e5fddb6d069b4ffc55b3f659915fc44fc6a2b
-
SHA256
0c42257a10f9712bb28e19bb56fca863eb0d3cd8f5897918fa50cc2623d5be6e
-
SHA512
349811f4f3b542575990d9e4a5852915fce99153470fcd486333f4ee2c9b245450475f401c573f48a57e617e96cbe0979d1564dcb04fd9b1ecf9ecef7d24149c
-
SSDEEP
49152:YKrVe1rx5G7Rv8SQgLsB4/drOj80LyZtpC:/rVe115GlkSM4VrOj8FBC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 389db651939799c268b6d8b725a94220_JaffaCakes118
Files
-
389db651939799c268b6d8b725a94220_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ