Static task
static1
Behavioral task
behavioral1
Sample
399c208a176944a1d7e221c71e57e025_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
399c208a176944a1d7e221c71e57e025_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
399c208a176944a1d7e221c71e57e025_JaffaCakes118
-
Size
1.7MB
-
MD5
399c208a176944a1d7e221c71e57e025
-
SHA1
2f9f9d9ada256aa35d99049a136c82d66c998389
-
SHA256
a735cf075103a6a6b76b211c42e411b25306a3b09f4ca6644e502f646bbca6c1
-
SHA512
1debc2dd3f0c0beb8edb4c2c47f56b22daf00471e8fc5b0ffa2e1ef12c449d2e1923f69177f32a30892131868d5a76e6b1ef805b11700b3a328dc16c91e316fd
-
SSDEEP
24576:6QQQQQQK/HEp6uutE6Ehg7mM+M6RkMkIM7gE6Eh67W:jEp6V0g7mM+M6RkMkIM7I067W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 399c208a176944a1d7e221c71e57e025_JaffaCakes118
Files
-
399c208a176944a1d7e221c71e57e025_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ