Static task
static1
Behavioral task
behavioral1
Sample
4153a6cf40b7d5da8f9bb5f85ba1802f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4153a6cf40b7d5da8f9bb5f85ba1802f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4153a6cf40b7d5da8f9bb5f85ba1802f_JaffaCakes118
-
Size
45KB
-
MD5
4153a6cf40b7d5da8f9bb5f85ba1802f
-
SHA1
655c6ee0e5c0e2eda2612b1c4abdb146b73ae588
-
SHA256
13b4eef4a8059b914db6b80cb498e8256ae3847f421ed416972fdf38c0c522b4
-
SHA512
7ef5d6c7a5ec4ea8fecbd7cc59d3e58c1ede5bfbc6290e2c07a3688d895b6ecc21c258415b99a62dbe1eeca99e426447126a6021add2fe338bca7265f063e133
-
SSDEEP
768:uV7L324y+pL13IMtZmAO4PREAkxHpq4NULPGNMPwxJtrpbfFAtT6PeVm9ZP+r2vS:uVO4rBBKsJhk9px3rVrNyvg9ZPc1r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4153a6cf40b7d5da8f9bb5f85ba1802f_JaffaCakes118
Files
-
4153a6cf40b7d5da8f9bb5f85ba1802f_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 659KB - Virtual size: 658KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.3MB - Virtual size: 19.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ