Static task
static1
Behavioral task
behavioral1
Sample
889721844ec57da8da54f7e77ecef4f5_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
889721844ec57da8da54f7e77ecef4f5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
889721844ec57da8da54f7e77ecef4f5_JaffaCakes118
-
Size
15KB
-
MD5
889721844ec57da8da54f7e77ecef4f5
-
SHA1
3f0a66ad442d9c1da2df3d9ddffd96bd862e704d
-
SHA256
429b9e0c39bd7e1bbbe579a14d185355e9580f366e0ed56847156bf1dcffb27c
-
SHA512
7124c26f1acb947f2c806cee771a944c0c1b3b8197a52e33305a38e8fd343a9b94dd5a7f0b27edb3a5331463f7213516019cb41005514f5ebe20d0da7162f6e1
-
SSDEEP
384:RD01GkxDZZyeIOIDQFzOuIIV6z8u3tVVaMiruQWl2:BBkhyOI8FyuVpu3tVIwl2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 889721844ec57da8da54f7e77ecef4f5_JaffaCakes118
Files
-
889721844ec57da8da54f7e77ecef4f5_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 504KB - Virtual size: 503KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.stroke Size: 187KB - Virtual size: 187KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.char Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.key Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ