Behavioral task
behavioral1
Sample
bc8e2219b2584ccedf7a892cc398fa98_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bc8e2219b2584ccedf7a892cc398fa98_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bc8e2219b2584ccedf7a892cc398fa98_JaffaCakes118
-
Size
46KB
-
MD5
bc8e2219b2584ccedf7a892cc398fa98
-
SHA1
a815fd416ff04e3a8901a259bd97d2021318e80e
-
SHA256
c72c10a54797600a55756df5bf35b08e9f1b8b02526e53aa5d898cfc458862b9
-
SHA512
f543b9f90a781eefaef219e2e08dc101224b24c18d85d3ac2b10debffc626b266a4851b21ce6ec644b85b3df9529388fab4c6d1ec29ba32ef8ab7360c1eb933f
-
SSDEEP
768:Ikc3y08DdFa/zm7rXWFf6v4g1pE1gX0dHSo/pHsi27BgzJVnOER+rlID/nLHRjyS:Imd6y/WFix1pSbdHSEsi2dgVOERAIDzl
Malware Config
Extracted
metasploit
encoder/shikata_ga_nai
Signatures
-
Metasploit family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc8e2219b2584ccedf7a892cc398fa98_JaffaCakes118
Files
-
bc8e2219b2584ccedf7a892cc398fa98_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
D9E0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
D9E1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE