Static task
static1
Behavioral task
behavioral1
Sample
5c9319a7b8e14a05700ef3a7ea15274d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5c9319a7b8e14a05700ef3a7ea15274d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5c9319a7b8e14a05700ef3a7ea15274d_JaffaCakes118
-
Size
77KB
-
MD5
5c9319a7b8e14a05700ef3a7ea15274d
-
SHA1
4af74b1ab69faed18431a19a07b10f3d9d78e4df
-
SHA256
8fdaeb726179702cb960dc06084ac082c07fd1e74f20bbcaec8aa67251fb983f
-
SHA512
e2cb24c23d8bed0c68c2876257b95093820172224119836d516eb8fe412821c27667db10c2c4ea0276a34174e6dd66007f3a18cf97d116a7eebaf121526866cd
-
SSDEEP
1536:Rvz1Q27x4i3zY/Z0gYhau91keFQFxyYj9mLppocA:Rvx7G+zoZ0ZhtOxyYj9nX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c9319a7b8e14a05700ef3a7ea15274d_JaffaCakes118
Files
-
5c9319a7b8e14a05700ef3a7ea15274d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.petite Size: 60KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 14KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE