Static task
static1
Behavioral task
behavioral1
Sample
62d032555945d92cb1ebe1afd204d393_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
62d032555945d92cb1ebe1afd204d393_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
62d032555945d92cb1ebe1afd204d393_JaffaCakes118
-
Size
11KB
-
MD5
62d032555945d92cb1ebe1afd204d393
-
SHA1
1af9bed6e732d8e7736463ff67e5b75f749db1c9
-
SHA256
76a9b549ba12c0811b627d158e4b60e8e670657841239fb6777677c6a04494fc
-
SHA512
a257afd4434be3eb5eaa37bcdd9c0d427f9d7e897d744325fb809dd69cfccf10c391b53c293150644a519a4b1597d5041a9c54f2a627becf27ac2b70c2124fa3
-
SSDEEP
192:MVSqKuOYjJmj2K8X6ir5819lPUfaIv/9CUnZgoDl0nQ8XlfZRkxJuCgmD/r:Zu/jsdIt85PUf79nnZZ0QGkrxr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62d032555945d92cb1ebe1afd204d393_JaffaCakes118
Files
-
62d032555945d92cb1ebe1afd204d393_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 180KB - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 220KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ