Static task
static1
Behavioral task
behavioral1
Sample
7434541fe9ac3abb33898a5e389090c4_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7434541fe9ac3abb33898a5e389090c4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7434541fe9ac3abb33898a5e389090c4_JaffaCakes118
-
Size
858KB
-
MD5
7434541fe9ac3abb33898a5e389090c4
-
SHA1
5516622819c30990cce5018b5cf73b27c80dd7c0
-
SHA256
b48ee861773c9a073e254b25edc3af9abc59e991bbfaff757d77be0c69e0a311
-
SHA512
adce968a3afd238166fd7ebb05c640941aaba426e72a7f363a7869aff4a21e55d62dca5e307dcb057c5ae4b0c81321bba5599a1e9726c6faecb26ba4dff508f9
-
SSDEEP
24576:/wQUecLiivg20DMHwSeFmPG0XibtcwTMScUlfkngzz/G:YQZcewD04HAYPzXiGwTbcUvzK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7434541fe9ac3abb33898a5e389090c4_JaffaCakes118
Files
-
7434541fe9ac3abb33898a5e389090c4_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.afhvjy Size: 2KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.pcxoqt Size: 115B - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.khnpcl Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ