Static task
static1
Behavioral task
behavioral1
Sample
700f9e81f9a08a52057298ef86f4dd7f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
700f9e81f9a08a52057298ef86f4dd7f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
700f9e81f9a08a52057298ef86f4dd7f_JaffaCakes118
-
Size
2.8MB
-
MD5
700f9e81f9a08a52057298ef86f4dd7f
-
SHA1
7774b506d187f8c9776fc9cab7cfb7d799ad2c30
-
SHA256
91ef4aec18f1e55f9946f65119b1c6c3c82aec63b2688b5e6f8df44e43e60739
-
SHA512
15537e3f5727441f2f0bb6fba8edf045cb23ec567488da48da1b41e1ad8ca594fcfdd303274604e6bb34e5df0e87f77ca93246e4f3fb4ac0ef02da1286fd80dd
-
SSDEEP
49152:M4DKgzX95VkD8/6ceL57cY+IgEuk3rfalunFLIbRuce8pyE81zX3Qf77yOmml0yy:MQz+D8S11cY+xu3rf0u98R/TcESzHwPQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 700f9e81f9a08a52057298ef86f4dd7f_JaffaCakes118
Files
-
700f9e81f9a08a52057298ef86f4dd7f_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 6KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ErCaN Size: 512B - Virtual size: 1024B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE