Static task
static1
Behavioral task
behavioral1
Sample
8306338ab6e98f9d951b164e274a3151_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8306338ab6e98f9d951b164e274a3151_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
8306338ab6e98f9d951b164e274a3151_JaffaCakes118
-
Size
1KB
-
MD5
8306338ab6e98f9d951b164e274a3151
-
SHA1
3a37164edb0a8243c5902010403824627f7220fa
-
SHA256
fef2dd134ad20818345fec37dbfdbb63ad438316474565f2083eb3f750bf3ab0
-
SHA512
e07c92f67561fd5ca219c552e7cff68a75ee4ea1fc7e073df5bb5fd0ca8022e355c108b213f915a7b0718d86c2a5ba6e10bd44f001467d5a1d64f0e953af18d7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8306338ab6e98f9d951b164e274a3151_JaffaCakes118
Files
-
8306338ab6e98f9d951b164e274a3151_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ