Static task
static1
Behavioral task
behavioral1
Sample
7242ebd83fae599ead66fc83988a61cc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7242ebd83fae599ead66fc83988a61cc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7242ebd83fae599ead66fc83988a61cc_JaffaCakes118
-
Size
688KB
-
MD5
7242ebd83fae599ead66fc83988a61cc
-
SHA1
3c61cc17350d356acffd95fb1d72254c19c78dde
-
SHA256
baf384908a20e249a05fdea2dbed90dd270171d92059c6a8793c0996d90c5607
-
SHA512
076a6a7952bf58aea5ba373b61678acba30e80233ab8118b09c95a4dae2cbadbfe7ec2ae0a5d2f9537ab7e6a80d5eaa65b07875f057dbd3b6f94e68e1850f1a2
-
SSDEEP
12288:3dnMmgjZBwZavrrYs2qs81mmR8bUF3Z4mxxnxPCjcngNPS:3dMmgjjwjs3s811R8gQmXENPS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7242ebd83fae599ead66fc83988a61cc_JaffaCakes118
Files
-
7242ebd83fae599ead66fc83988a61cc_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 372KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE