Static task
static1
Behavioral task
behavioral1
Sample
5abcd2666d484b5c7a7d20d6f6c5fac0_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5abcd2666d484b5c7a7d20d6f6c5fac0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5abcd2666d484b5c7a7d20d6f6c5fac0_JaffaCakes118
-
Size
22KB
-
MD5
5abcd2666d484b5c7a7d20d6f6c5fac0
-
SHA1
020f7ecdc7a5606a94138f40fb1a3f5b34c27547
-
SHA256
96168c115f176fd200a036965957dc39c8c9f312cffd0828b6e07a2df7714678
-
SHA512
a979bb39bb0a6d255f8e7e4b3e6013e9dc22b413cce415266d0a513327554c9b467cbd2df9899c03f16fef5e3b753091031fad6ec882e77b52e079c2243928e4
-
SSDEEP
384:pTVV7ZwAbK4y7tEPhL1UAsNgH5tT1mQNZ2qFPzlEo7S2VxMe:NVV7LG4y+pL13IMtZmQG4PhE1kxV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5abcd2666d484b5c7a7d20d6f6c5fac0_JaffaCakes118
Files
-
5abcd2666d484b5c7a7d20d6f6c5fac0_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 659KB - Virtual size: 658KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.3MB - Virtual size: 19.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ