Static task
static1
Behavioral task
behavioral1
Sample
875d47ff9f8447c6fa2a8fabb4d96e58_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
875d47ff9f8447c6fa2a8fabb4d96e58_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
875d47ff9f8447c6fa2a8fabb4d96e58_JaffaCakes118
-
Size
636KB
-
MD5
875d47ff9f8447c6fa2a8fabb4d96e58
-
SHA1
595bc95f001d7fa140e536b06b607f5d96202d5b
-
SHA256
0d2c80382523bd391fc661526af5cf0403f4d2f1c72f6b4733d9fbbda3b1df3f
-
SHA512
a48e47b151fc107c6c5590d1d003724a36a5ae31c328b2f5f31b677b311623bbda45f0351c21802ea8dd269c71ff250f2f1dfa141ce9a2e7686bd24d804cc9e5
-
SSDEEP
12288:zClP6H+XpBUM8VsmIAgmQ6ucrX1hn5O+IIi711c2obY7+s1kXE49hWevLn:mQGAVsmtgx6uqTtitocisipRj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 875d47ff9f8447c6fa2a8fabb4d96e58_JaffaCakes118
Files
-
875d47ff9f8447c6fa2a8fabb4d96e58_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 372KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 262KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE