Static task
static1
Behavioral task
behavioral1
Sample
a857bfb47dc4a4605c8d0203f046d0e1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a857bfb47dc4a4605c8d0203f046d0e1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a857bfb47dc4a4605c8d0203f046d0e1_JaffaCakes118
-
Size
823KB
-
MD5
a857bfb47dc4a4605c8d0203f046d0e1
-
SHA1
1083d225f80ed4fd9568d7ff8324fb6348451ed5
-
SHA256
43dc6918c4316be0b91d70af0a9b3613b83fdbc92173e66998b0efbac3c7e982
-
SHA512
8c620e3c5a00ca08cdcd0e327c16fb11fbcdbb4a37c9ef23af82d07d47d4001b2466c9c05e3a20a409d34055c74d51d40c125cfd9b8c4768403ecefd112cc922
-
SSDEEP
24576:sNt6Xi3ZUpjdMLecxIpyNLMRhLQmXw4uAm:NiJgMLeUIkN/mgX3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a857bfb47dc4a4605c8d0203f046d0e1_JaffaCakes118
Files
-
a857bfb47dc4a4605c8d0203f046d0e1_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 507KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 315KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE