Static task
static1
Behavioral task
behavioral1
Sample
9fc5f4db547548342e99614a0452b5d4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9fc5f4db547548342e99614a0452b5d4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9fc5f4db547548342e99614a0452b5d4_JaffaCakes118
-
Size
761KB
-
MD5
9fc5f4db547548342e99614a0452b5d4
-
SHA1
5baa211629e2fb0e8d771c310c3183621cac0773
-
SHA256
b348c2c86ce5607f9ea399ee06d78a78c1211a0f82cfda5a98ba3aeda9a04176
-
SHA512
669684d08958dcc9a9b771719e21ddd1a29b39241804ad511ffcce689f5763f029aee0a7e7a24733fadb967bd991cd1bdab0c317bdea7d82a3bc736b124fef20
-
SSDEEP
12288:xVrACYDs69keD3KtXKOV7VwCsmSC40xUoqM1MYRFdF3Z4mxxOFs8m83PinEKCxTu:xWj466erKt6QsBoUVG9XQmXSs8BfWOxK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9fc5f4db547548342e99614a0452b5d4_JaffaCakes118
Files
-
9fc5f4db547548342e99614a0452b5d4_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 448KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 445KB - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE