Static task
static1
Behavioral task
behavioral1
Sample
a5114ec5c1258f9776c0a72a6ad31275_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a5114ec5c1258f9776c0a72a6ad31275_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a5114ec5c1258f9776c0a72a6ad31275_JaffaCakes118
-
Size
608KB
-
MD5
a5114ec5c1258f9776c0a72a6ad31275
-
SHA1
199c8778d54f03960af2e24f66c5c6e6d6edbc3d
-
SHA256
3a3852b05d3f6b93d790c7ce0a708fd48eb75389fa3f50ae7efe81547212e83e
-
SHA512
569fc884eb19857699ed832fbdf2efc23bf120f387b3cd6d7ed6dca057324c72a86a7425c35cfb87b4354844a1b48e92e7d4fbf58c7e8bd68e278b9533e46ba2
-
SSDEEP
12288:KlLlUSg1Y9VOlfC7uT5/nKuj6SWljKkoe8v7sOrqqnjrDMGTZl7ggI1s:KXBg1Y90lfdNPNFMjKkoe8zsGXZ1h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5114ec5c1258f9776c0a72a6ad31275_JaffaCakes118
Files
-
a5114ec5c1258f9776c0a72a6ad31275_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 10.8MB - Virtual size: 35.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE