Static task
static1
Behavioral task
behavioral1
Sample
676ef4a94d8a73fb0d8e8c8e89834c3b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
676ef4a94d8a73fb0d8e8c8e89834c3b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
676ef4a94d8a73fb0d8e8c8e89834c3b_JaffaCakes118
-
Size
98KB
-
MD5
676ef4a94d8a73fb0d8e8c8e89834c3b
-
SHA1
e61bd2631c91c47cab4ff7f5348e978080cf6ce1
-
SHA256
d327afd86824a084c77623c1253bb2200b5812dd46a0825b2dcd5cde33646605
-
SHA512
943582d91a2f294a63ef70413721a8ddac01f224a2e2fe845f1ccd37889b18d00a1709e309e75d7bb59a5e29464ffab19ed71f2f16198aa7c2a6e2b6b45aaea6
-
SSDEEP
1536:J17kkDqOmRFhPnW81tZJsKdfnopql7Ni5WUJTQMTbUSO:J0OmRFhPnW81HqKdfnoMtNi5WUJKSO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 676ef4a94d8a73fb0d8e8c8e89834c3b_JaffaCakes118
Files
-
676ef4a94d8a73fb0d8e8c8e89834c3b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 637KB - Virtual size: 636KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 179KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.3MB - Virtual size: 19.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ