Static task
static1
Behavioral task
behavioral1
Sample
a89d5689ceeaae173eb7ab1382a1b1f4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a89d5689ceeaae173eb7ab1382a1b1f4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a89d5689ceeaae173eb7ab1382a1b1f4_JaffaCakes118
-
Size
22KB
-
MD5
a89d5689ceeaae173eb7ab1382a1b1f4
-
SHA1
f0c284d2ce806ab4b5c219ed611d744d7ef2204f
-
SHA256
158c9af35bba311d5e517e693ab31c1579d6e219fc763938e00ca6b1265c3175
-
SHA512
fb6f0b5ab38ff5f6dc65004a1b7f661553cd6f2dba9d11193689a12c4d8445d7a23db078448a0b93f38267448d07a3230eaffbbf56912491fd647965c58e3cd6
-
SSDEEP
384:yvw8YOvHidCU3OI5yClhmX7U9IXihezdRXyq1Rz+J+9:mY/CI9FkU9IXiheB4ayJ8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a89d5689ceeaae173eb7ab1382a1b1f4_JaffaCakes118
Files
-
a89d5689ceeaae173eb7ab1382a1b1f4_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 714B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ