Static task
static1
Behavioral task
behavioral1
Sample
c05ecf0f5c08b9a737a5545d1cda155a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c05ecf0f5c08b9a737a5545d1cda155a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c05ecf0f5c08b9a737a5545d1cda155a_JaffaCakes118
-
Size
12KB
-
MD5
c05ecf0f5c08b9a737a5545d1cda155a
-
SHA1
2150d51c1edc83e380c65c1f4cfd1a3a702bac04
-
SHA256
eac19af0bd25dfe53bcbe2c350d73baf11351817114c37e59500f651c7a6ec4d
-
SHA512
88eecbe9640db50fb43bd30e9499308c8c0b2f9e544eaefc30374a8465fa4563a128bbb8e30ae4fa1ed7369f6adf1b1406334b5e063974969615bc43fc3cb66b
-
SSDEEP
192:UpmQDZxSb0t9rnRXsczUo3rjvHa+FeOdvZ1zSFHb6ClHQko6w1z:Up9XSb0tFhsLo3vl1EHb6CVTY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c05ecf0f5c08b9a737a5545d1cda155a_JaffaCakes118
Files
-
c05ecf0f5c08b9a737a5545d1cda155a_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 335KB - Virtual size: 334KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ