Static task
static1
Behavioral task
behavioral1
Sample
ad974f1da317310df1a56caca49b49d3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ad974f1da317310df1a56caca49b49d3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ad974f1da317310df1a56caca49b49d3_JaffaCakes118
-
Size
635KB
-
MD5
ad974f1da317310df1a56caca49b49d3
-
SHA1
03221c8551b837a40343cced35dfe994bb62fc6a
-
SHA256
cd10b59d106c364fde458c12d0aab45f1f1ea108cb10b688b3e190c0b0f3d332
-
SHA512
6b91c1e35275baddb94043d21817dbfca094b0e81a52d1bbd2eb0066ee5dbc442e627a920eba51ef5a1cd92f970989508f7fde690cbf2690977569ff8b9022c1
-
SSDEEP
12288:QEn0e5N2ilEsjo6kvM669rOBFgkJilWe21c2obY7ynGXp2AC:6YU5MWBJYlWRocGGXs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad974f1da317310df1a56caca49b49d3_JaffaCakes118
Files
-
ad974f1da317310df1a56caca49b49d3_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 371KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 262KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE