Static task
static1
Behavioral task
behavioral1
Sample
a268a86814638bf705ff9b2df7f628be_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a268a86814638bf705ff9b2df7f628be_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a268a86814638bf705ff9b2df7f628be_JaffaCakes118
-
Size
385KB
-
MD5
a268a86814638bf705ff9b2df7f628be
-
SHA1
0e1af3ba6c9ea629a7fdc03ba3e2a93d8fb50675
-
SHA256
c0a3fe1de05c0e02f367d96fdc82965f8a2fc2257ce3d4767eaef528b7e084b1
-
SHA512
dba60564fd0dcd4011f66bca8fd71cff5891148e3c2ff3677426fa678d182acef4dd2ff7f4199eb7818e6dfe7340421cb7b3196552d0cc622e3128267173c9ad
-
SSDEEP
6144:sW2fZnURdwGUZdp6fmsK2bwOMOuc268unMr9pnRmzSAoeehzJh+w9Y4iUERa:Cta4wfpK286J2AMr9pnNd7MUEg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a268a86814638bf705ff9b2df7f628be_JaffaCakes118
Files
-
a268a86814638bf705ff9b2df7f628be_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 609KB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE