Static task
static1
Behavioral task
behavioral1
Sample
c04bbad65e716780f6e4cd8841c8f6b2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c04bbad65e716780f6e4cd8841c8f6b2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c04bbad65e716780f6e4cd8841c8f6b2_JaffaCakes118
-
Size
9KB
-
MD5
c04bbad65e716780f6e4cd8841c8f6b2
-
SHA1
3297927dc49215e3c8d894c0d4ab7b1d88d052a9
-
SHA256
1bb487a6fe928a405fa6ace00ff4c710364d77c2704bf9b240cce14c9cf1ee13
-
SHA512
d8c16bec3800ef248a655ec83606e570f4f74f52511dd2ff3caabcf29c7e33520047329120c6139dc3323331ce1f9520d9948762a55caa076f8d4c4ac10185f0
-
SSDEEP
192:htE2J8OHqYK5tdiuS5FCq+KKssb4oppXIIRJe7ODPR:hq2JBqPUuSTCq+KKs0rDPe6j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c04bbad65e716780f6e4cd8841c8f6b2_JaffaCakes118
Files
-
c04bbad65e716780f6e4cd8841c8f6b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 984B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NewIT Size: 512B - Virtual size: 236B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE