Static task
static1
Behavioral task
behavioral1
Sample
a23c8874a5d3db9db97c14c3e106405c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a23c8874a5d3db9db97c14c3e106405c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a23c8874a5d3db9db97c14c3e106405c_JaffaCakes118
-
Size
17KB
-
MD5
a23c8874a5d3db9db97c14c3e106405c
-
SHA1
dcbf31c79024dd19f9cb2f370154d391163595d9
-
SHA256
45f5ef541e2451bbeb66c80da9e3ff3157cdbdef10cade96119a28b7cd9500b8
-
SHA512
c44264e38d38271e8be789cfdf5a1711a6cb5e8883134ae476af89fbeca511f1ab7376815ae2d383a15a1e5e3bc320e3e456c41dd1af4eea99d7756fd9185960
-
SSDEEP
384:UVBe6sqN0nRxlhNAv2kwdHQyXwPTwGEDiXsA+dh0Y/tz:UVBe6sJRxltXwP8GrXudhh/Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a23c8874a5d3db9db97c14c3e106405c_JaffaCakes118
Files
-
a23c8874a5d3db9db97c14c3e106405c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 226KB - Virtual size: 230KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ