Static task
static1
Behavioral task
behavioral1
Sample
b504893490ae50ed7bd37024b99c8b20_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b504893490ae50ed7bd37024b99c8b20_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b504893490ae50ed7bd37024b99c8b20_JaffaCakes118
-
Size
411KB
-
MD5
b504893490ae50ed7bd37024b99c8b20
-
SHA1
2df757fcc891459f9fd60b9bc7fe48d6370d914f
-
SHA256
756db62f16d390cb233d45e579007c7d06d01c194f2c8a0afbcf566b3aa5b76c
-
SHA512
e72aa6fd9e09cebc8ecb9ee09d1216031ce9eaa1b91ba11b676774b1168bcaddbd7411d8f62f650916c7167f99e331755dc087212279518cdb44275896758142
-
SSDEEP
12288:oGx55RB0hFf2JazbNvs2WCCdhlRCcRff:9553OF+wzBvsdHzC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b504893490ae50ed7bd37024b99c8b20_JaffaCakes118
Files
-
b504893490ae50ed7bd37024b99c8b20_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 392KB - Virtual size: 799KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 459KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ