Static task
static1
Behavioral task
behavioral1
Sample
b036010eec1852a2dfd2713b38e19476_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b036010eec1852a2dfd2713b38e19476_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b036010eec1852a2dfd2713b38e19476_JaffaCakes118
-
Size
20KB
-
MD5
b036010eec1852a2dfd2713b38e19476
-
SHA1
ac17a0a96a04ace0874e2ef1392db4b9c94cbcb9
-
SHA256
4930750051e941ac9e5eb91db3136ede49c18739673e948faf07491e3e345a83
-
SHA512
0cb835a72583e6bd97ce384bc926b3849fb9f127350feec3b4e701a8c3dbf73f4214c8adf3b748c0c8361090979acea9753cfa64484446720b871c3c78ea92bc
-
SSDEEP
384:obu1wUf1wq1s0DfS0AsNF0L+hT0J4AoFK/ZfWc3njO6b9xJu:YuDeofoI+I6Qy3nHDg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b036010eec1852a2dfd2713b38e19476_JaffaCakes118
Files
-
b036010eec1852a2dfd2713b38e19476_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 662KB - Virtual size: 661KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 181KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.6MB - Virtual size: 19.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ