Static task
static1
Behavioral task
behavioral1
Sample
b2901c9448a8b0c2afeb73515e050f77_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b2901c9448a8b0c2afeb73515e050f77_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b2901c9448a8b0c2afeb73515e050f77_JaffaCakes118
-
Size
16KB
-
MD5
b2901c9448a8b0c2afeb73515e050f77
-
SHA1
df4d56f309e7ce6fe95207838f15d1422d36682f
-
SHA256
5c0a244a1959cbf3951c6a0244083a791a1ada996e0d9df1b8777d589a08c50a
-
SHA512
d49668f52b77b49a7ae60e194988375eb67c256d0223201b1f0579957b3fdc005f3a4830100743cf6c2cb9f67222a4af23339f2578e2ec76b6147e5e7de8cb3d
-
SSDEEP
192:0urZ/KsnIZnnnnnnnnnnLuMi6yZKogOA1Pid5Ik8T9HVOEaaZn3m7g:RrN+ZuMiCo0K3Ikm91OEaaZn2M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2901c9448a8b0c2afeb73515e050f77_JaffaCakes118
Files
-
b2901c9448a8b0c2afeb73515e050f77_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ