Static task
static1
Behavioral task
behavioral1
Sample
6245239986a11cdc010034bcd4993b50_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6245239986a11cdc010034bcd4993b50_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6245239986a11cdc010034bcd4993b50_JaffaCakes118
-
Size
8KB
-
MD5
6245239986a11cdc010034bcd4993b50
-
SHA1
20839c5e9161c77f31da330f3db2f4900e1c4be2
-
SHA256
4896d6615e3a444a427cf02012b2e129579bcfd0021f83914f0d22f8c4530a57
-
SHA512
6638daa4114c03696a5d181d7be43c12e24fb64c8015aee39705b64d34231a0ca83da4d9a71f60a3ac054f95ed101e421f5299b46a67dc34add1f7f37e5701a3
-
SSDEEP
192:IVrjzD5t5V+6xf7NTeCZVsqMxKplOi5x4ssUik:izD7+6xf7l4qMxKpl9ADU7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6245239986a11cdc010034bcd4993b50_JaffaCakes118
Files
-
6245239986a11cdc010034bcd4993b50_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34.2MB - Virtual size: 34.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ