Static task
static1
Behavioral task
behavioral1
Sample
4339f3e05ff7c2c2544c09f1b1376fd9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4339f3e05ff7c2c2544c09f1b1376fd9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4339f3e05ff7c2c2544c09f1b1376fd9_JaffaCakes118
-
Size
50KB
-
MD5
4339f3e05ff7c2c2544c09f1b1376fd9
-
SHA1
19d0211d23b57cf8bc16e49292984f2e7b2a410e
-
SHA256
90e66da00639f30fea1ac15b0e9e173d0cdfab0f587220538a5e31251681a5fb
-
SHA512
17ac329f95611499a942d634a5b667c7aaeaf3d59d2d8c04bcced641ffb306a22137760df20443b43289d4c614e599b9864c5438beee2629cae1dffcbf823665
-
SSDEEP
768:K5PDvkkMYOP8b60kw5JYVb/EPHL3AyLoouJKdal:KVDvkk/OP8++Ju8PrQOaJKd2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4339f3e05ff7c2c2544c09f1b1376fd9_JaffaCakes118
Files
-
4339f3e05ff7c2c2544c09f1b1376fd9_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xcpad Size: - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE