Static task
static1
Behavioral task
behavioral1
Sample
b112600b85396efb7acd9b71084f32c9_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b112600b85396efb7acd9b71084f32c9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b112600b85396efb7acd9b71084f32c9_JaffaCakes118
-
Size
354KB
-
MD5
b112600b85396efb7acd9b71084f32c9
-
SHA1
29d85027e39591cc9c35c8e9c55f141ee2e646a2
-
SHA256
10afe7a24b1f1728769d4174d1bc7e96c24b25805c9d265a3f95ddadf269c5dd
-
SHA512
6174e16ba29adc5d43f1082a058ad9ffe3be285a0d42bd5fb5689f03f990fe7f9e67af54ce7fdb05a7851ea6f502813d94a2ae5b1bfdea612f778007a20312ba
-
SSDEEP
6144:3LzaIMPUEt7yMQNwCFnbcUOtA1hPoEuDiO10Clm0YriLxGBNNgDGgdqaszuQ:HbExaJbcUOtA1hAEul10piLxGBNGDHYR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b112600b85396efb7acd9b71084f32c9_JaffaCakes118
Files
-
b112600b85396efb7acd9b71084f32c9_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: 288KB - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 39KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE