Static task
static1
Behavioral task
behavioral1
Sample
b8ab8c18e2b785b58f41524512c71c95_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b8ab8c18e2b785b58f41524512c71c95_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b8ab8c18e2b785b58f41524512c71c95_JaffaCakes118
-
Size
160KB
-
MD5
b8ab8c18e2b785b58f41524512c71c95
-
SHA1
fd94854bb91885b3a97bc9dd55285f1a6caaa83c
-
SHA256
cfdd6329471731b0cf5e660e9c32a7e3ecc7ce64f28e2af221c7fe85a943a7ce
-
SHA512
1f424d4611a82870bc97ef8e1ffa0917e44beab7b0d95a0ccb9b587946f4d29661d33696b331d9d8f924f3c124d5ab04573dc75e3b22ce30864188f1ac7c9122
-
SSDEEP
1536:hYeqN5DBl0n80PRXm63NAEVkLrAqeDieDSvKxZlYIdaNiTsiTSeqN5DBl0n80PRl:hMctJlgDCxEId6R5ctJlgDCxEb+b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8ab8c18e2b785b58f41524512c71c95_JaffaCakes118
Files
-
b8ab8c18e2b785b58f41524512c71c95_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1000B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ