Static task
static1
Behavioral task
behavioral1
Sample
863beb72b4a73ce5f8254b0e652a36dc_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
863beb72b4a73ce5f8254b0e652a36dc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
863beb72b4a73ce5f8254b0e652a36dc_JaffaCakes118
-
Size
312KB
-
MD5
863beb72b4a73ce5f8254b0e652a36dc
-
SHA1
f3676f591c46f7cc98b58132c80caf52b9cf9b56
-
SHA256
2c09a54d94d7b1518b1633e3d26431de8c32c9243e54afd96a7a2d8e4dcd772e
-
SHA512
bb7863a04fa6a431481cb7891965b1013c26b4ee8294aaa1b900c2aa3637707285796def47c42405b839d9d9e66f903649733ab423e90e85d005096266a8cdf0
-
SSDEEP
6144:CPK0yfjHSvLehs3TDjooOXHpUlrSMtnJweXDdKlbeggFskZpq7qpQgtE16:svyOa2Th1tnJVTQtezFD85x1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 863beb72b4a73ce5f8254b0e652a36dc_JaffaCakes118
Files
-
863beb72b4a73ce5f8254b0e652a36dc_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512B - Virtual size: 712KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 307KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE