Static task
static1
Behavioral task
behavioral1
Sample
82522d2e082c901def515a22a6670f55_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
82522d2e082c901def515a22a6670f55_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
82522d2e082c901def515a22a6670f55_JaffaCakes118
-
Size
4KB
-
MD5
82522d2e082c901def515a22a6670f55
-
SHA1
0fc1df3f02decce240df03f6a478245d71f4fe98
-
SHA256
d507da6211df0510a337e113a960aff3e76fba104d5a2559808d6f53521a9a21
-
SHA512
f624f4bb9a7e5444676f84ddf3ecab376517bd7471292f676031d1af6501b29015846a6ff3ed10619f3e60f6a49b5e1a4a85008b80da7574eccb03352bc4b731
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82522d2e082c901def515a22a6670f55_JaffaCakes118
Files
-
82522d2e082c901def515a22a6670f55_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 659KB - Virtual size: 659KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 181KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.3MB - Virtual size: 19.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ