Static task
static1
Behavioral task
behavioral1
Sample
b446ae38a093c30e4182f462c1c8221b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b446ae38a093c30e4182f462c1c8221b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b446ae38a093c30e4182f462c1c8221b_JaffaCakes118
-
Size
78KB
-
MD5
b446ae38a093c30e4182f462c1c8221b
-
SHA1
092ae1a1a61fa26dfa3900f794f317cd8523d489
-
SHA256
19800ed4bf208daf08a5209b568a47e2422f1a780508b674c0690a3692a8ea84
-
SHA512
44083e97ec3096a0a85d228a06e2ed850636ae4f71a5009ebb76759d4d170d3657649e312cbb44224b6e6e3fd4e7f5fbd04a93a1a55f749c2267865df1f93d2e
-
SSDEEP
1536:xD9gjcpgYz+zCpuvFkap0Gp7nREM8Y4W2HOs35eC:xD2Qn+zCpuvFka5nEQfMlIC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b446ae38a093c30e4182f462c1c8221b_JaffaCakes118
Files
-
b446ae38a093c30e4182f462c1c8221b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ