Static task
static1
Behavioral task
behavioral1
Sample
823bd004b20144168b14c55f5edf9f50_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
823bd004b20144168b14c55f5edf9f50_JaffaCakes118
-
Size
660KB
-
MD5
823bd004b20144168b14c55f5edf9f50
-
SHA1
3d9fe51bec0cb47eddca532d07991defe99ee8f8
-
SHA256
7a14c932b50c57f073debd813ccae3e3700077bf62fe3d9e3c28b2cc2c6d05c0
-
SHA512
d296b45a8190361d42f387ae3a7b8c8c1dfc2e57e0056512e8f447e1840f12fdfd7afd6228baeaeebbc856db24414e99dbd4f9e6d4e98da4e1bdb5aad0822ccc
-
SSDEEP
12288:CKxFkSK0RamkG87IfM4jH5iBgEBahtdqy3QDpApzDp+dHEoMuP0g9FZoS8+X:CKj1RamM7MM4jZiSa8lh49t8igg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 823bd004b20144168b14c55f5edf9f50_JaffaCakes118
Files
-
823bd004b20144168b14c55f5edf9f50_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
f4cg0 Size: - Virtual size: 4.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
f4cg1 Size: 649KB - Virtual size: 652KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
f4cg2 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE