Static task
static1
Behavioral task
behavioral1
Sample
b137c55f2d9976c2a3b5792e736ee3de_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b137c55f2d9976c2a3b5792e736ee3de_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b137c55f2d9976c2a3b5792e736ee3de_JaffaCakes118
-
Size
84KB
-
MD5
b137c55f2d9976c2a3b5792e736ee3de
-
SHA1
a408b863642ee04a4b44371c12ff0528ea4eaf95
-
SHA256
7a2acd0c47165e7b0d6001fea93208db711a9f5aa44605c5095c16f33fcbaca1
-
SHA512
4a6f014fb015523f50ad263af9c1c18fc4815d24200400e743eae5fe05204a510633fd1b4c1b3b0edcd36ede78867b06088fb1f0432252288e98f46b2c23d82c
-
SSDEEP
1536:+/ITt1EjhM+mntdm5hOwrqWOqKKwh6dc8kV6eBsCXKcx:HTLlnTmTOw+Hywh6de1BsCx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b137c55f2d9976c2a3b5792e736ee3de_JaffaCakes118
Files
-
b137c55f2d9976c2a3b5792e736ee3de_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DADA ! Size: 76B - Virtual size: 76B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE