Static task
static1
Behavioral task
behavioral1
Sample
b1c9cd006e2782d19a96bcb5aabe4339_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b1c9cd006e2782d19a96bcb5aabe4339_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b1c9cd006e2782d19a96bcb5aabe4339_JaffaCakes118
-
Size
1.1MB
-
MD5
b1c9cd006e2782d19a96bcb5aabe4339
-
SHA1
f8864b4bc1b75473a200b22a4f94ee26e4bfb395
-
SHA256
2f616974862f00c7d2b82113ff575d3d7d55356b9cd261ab64ca3ce9a9e620b3
-
SHA512
2a22df2dc9611767bca77df207a741346611dcdd0644af827ebad870cf6c3d7e0c15bbab1d9d9a15db3cafdc5a56b5acb75e9ef28280b081cb01f66cc93ead11
-
SSDEEP
24576:Zb4Ce0oM6JXMHaGoy5sMpew1bztX/j4WFOBDE4AF/bQmX4s0LCi1MpArJn8:h57WXM6VlMpew1bzqWEJy/cmwPMpAS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1c9cd006e2782d19a96bcb5aabe4339_JaffaCakes118
Files
-
b1c9cd006e2782d19a96bcb5aabe4339_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 816KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 843KB - Virtual size: 860KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE