Static task
static1
Behavioral task
behavioral1
Sample
829a2ba16d1da541bb0722f68a4fe0ac_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
829a2ba16d1da541bb0722f68a4fe0ac_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
829a2ba16d1da541bb0722f68a4fe0ac_JaffaCakes118
-
Size
116KB
-
MD5
829a2ba16d1da541bb0722f68a4fe0ac
-
SHA1
68e663ccba0035fa02ba67f7d50fd106d97c93aa
-
SHA256
4d361133c252398c7a0d1e74b64c900f58f593c8aca1f46e50d7b1d1dd93271c
-
SHA512
80f3243c231120a69f51413361b5a4f66b28eec4671aae0dc3f6573b9eda5d4fc10ebaa2ed76f74f819ed48c08a5897283d197a0ee0476da61e9a32e04ee73cb
-
SSDEEP
1536:QDpOdKRGKpj3ys/loi2kJf0oRUOn/W0Fvwgd7BKUalBMIxP32:Q95GQis/lolkJf0gn1Fvwg9BsBTP32
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 829a2ba16d1da541bb0722f68a4fe0ac_JaffaCakes118
Files
-
829a2ba16d1da541bb0722f68a4fe0ac_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.kdata Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE