Static task
static1
Behavioral task
behavioral1
Sample
b00e5dd18e241b8c3e6703818a49b781_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b00e5dd18e241b8c3e6703818a49b781_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b00e5dd18e241b8c3e6703818a49b781_JaffaCakes118
-
Size
445KB
-
MD5
b00e5dd18e241b8c3e6703818a49b781
-
SHA1
a643fad0c32450e60c4755ed02fc454e1d855f49
-
SHA256
7f10c4050e895b124f45467e04c3f872e4f5406e2541672c602ca92e576e12cb
-
SHA512
21d6ea797aa9db51cb9cc2070266e86ef44b7c2a7773853bfea700ca3f2da6b3482ceb50c3fbb6fc904da7ca01d11491b8d59c8b838043ba1df0a9155433850b
-
SSDEEP
12288:F8oH5U4BaRgSCMoQGr143p42nyNDQxplBsbzhnB:F8oH5U4IR2MR3H1plShB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b00e5dd18e241b8c3e6703818a49b781_JaffaCakes118
Files
-
b00e5dd18e241b8c3e6703818a49b781_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 403KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ