Static task
static1
Behavioral task
behavioral1
Sample
95cdb4032776fd9f86503d5fa28d2d46_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
95cdb4032776fd9f86503d5fa28d2d46_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
95cdb4032776fd9f86503d5fa28d2d46_JaffaCakes118
-
Size
679KB
-
MD5
95cdb4032776fd9f86503d5fa28d2d46
-
SHA1
377c7b5aa660d7ff37c097a4165f48a6d7b6fd0b
-
SHA256
685f0b35a41e6d2380f56758d9b6148eb0d39f47685c42c7a76773d28819a386
-
SHA512
5d7aba7bb6f8deed51694e211ba101312f5df0f1c01bb843288c2373026651a2b57e3750e9d16b371ad6dffa06f8d0dfde0da0958840986b1441fd63aed1a4a9
-
SSDEEP
12288:3WIBR/iRjPfij4NbKWCeFb5u4YRKUECBgF3Z4mxxiCQ4/GaadUh7xAddX:GIBtiFeKbn5fYRKwgQmXiCQ83ZxAddX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95cdb4032776fd9f86503d5fa28d2d46_JaffaCakes118
Files
-
95cdb4032776fd9f86503d5fa28d2d46_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 768KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 365KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE