Static task
static1
Behavioral task
behavioral1
Sample
95b101fce434285e1267582a185c464e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
95b101fce434285e1267582a185c464e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
95b101fce434285e1267582a185c464e_JaffaCakes118
-
Size
406KB
-
MD5
95b101fce434285e1267582a185c464e
-
SHA1
a79e3fa4a03224bdb315ef2d2bb9dc6c21d9ecf0
-
SHA256
83aa2284ce8639e133d2867433416762218c8241b70e7508d2e0527f37398a46
-
SHA512
bff4a62a0930c060259a07ff4edb5a068f223ff2af7a72040988dd4f5bc7c283d4354bfc86e43ad632aaf9806d765fdd83154be148df5274cde521f95956d5a6
-
SSDEEP
12288:i9lrpPxDP6F3Z4mxxxp9MsOjFK6tjMlW/SCTXB/:inDSQmXqcIqeXB/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95b101fce434285e1267582a185c464e_JaffaCakes118
Files
-
95b101fce434285e1267582a185c464e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 20KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 352KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE