Static task
static1
Behavioral task
behavioral1
Sample
94b57c5659440205e1346a949e2e805d_JaffaCakes118.sys
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
94b57c5659440205e1346a949e2e805d_JaffaCakes118.sys
Resource
win10v2004-20240802-en
General
-
Target
94b57c5659440205e1346a949e2e805d_JaffaCakes118
-
Size
13KB
-
MD5
94b57c5659440205e1346a949e2e805d
-
SHA1
b380b8a2b5cb061d3d2496e8781809be12e28a06
-
SHA256
c4ec30a94c9ce2aa9c00c2124c20c1001aab9e74481eee2a58c8567d899c611d
-
SHA512
e11107dea9b1f72614f62370a8882bb36cae421c071a485b68a960db8dd29dd8ea7a3baef40e1e21e2f37f483e8af92819c2468ed8043539ebf2670f34bcc2a2
-
SSDEEP
384:NCQeTS0bi5iZi/i2iniW57Xiii8iJir47EAaLbbpfsXbhJfsyvbMlafsvbGefsRx:Y1TS1Ag6HinLxQlGys1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94b57c5659440205e1346a949e2e805d_JaffaCakes118
Files
-
94b57c5659440205e1346a949e2e805d_JaffaCakes118.sys .js windows:5 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 320B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 736B - Virtual size: 712B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 352B - Virtual size: 346B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ