Static task
static1
Behavioral task
behavioral1
Sample
b9cf4867e65e36760b2d7521ccaaffcb_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b9cf4867e65e36760b2d7521ccaaffcb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b9cf4867e65e36760b2d7521ccaaffcb_JaffaCakes118
-
Size
52KB
-
MD5
b9cf4867e65e36760b2d7521ccaaffcb
-
SHA1
1bec08c28c05dd5e789e22710bb4de51f9563aac
-
SHA256
d0bcdeeb47594d64842aaca18cfe0b51ece749fa045ea2badddc7d09b0b3facc
-
SHA512
43c7bda253ffe3c986e360b4a9015140bcbcf068b27756d5908de37bf97e6ad35ee14ea0d6ce026075878aeac8df08f44df29eb6e4a9b05f2b8c38f76dbaceaf
-
SSDEEP
768:ye08lyJ7rvqe6GiK0T3PzNOPwMExXXvC2O8/Wd6tZJzrWoQ5FfUMAxcJN1Aqmh+:yf08rie6ZNxPnO8NtZJXaFfHAu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9cf4867e65e36760b2d7521ccaaffcb_JaffaCakes118
Files
-
b9cf4867e65e36760b2d7521ccaaffcb_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 637KB - Virtual size: 636KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 179KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.3MB - Virtual size: 19.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ