Static task
static1
Behavioral task
behavioral1
Sample
c76a82b1bde9c029858ffe5c5078a035_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c76a82b1bde9c029858ffe5c5078a035_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c76a82b1bde9c029858ffe5c5078a035_JaffaCakes118
-
Size
418KB
-
MD5
c76a82b1bde9c029858ffe5c5078a035
-
SHA1
9bcedb2a9dd053ca9084eab6210fdf933040a88c
-
SHA256
79cab7620836b4527928c93d1e5e49073a0a164206053d39de3389c302d780a0
-
SHA512
3e8437bb944e7280855b18c5ad0c6e1115aa405a99b604f20e601e6ec3d481b75a89ad1ec64f1e8155fe2b27aaab0789ccb80e9dc28a04d56b99323b2abbdf66
-
SSDEEP
12288:+ApfJL3+ILwljl8ShwZND9aUeBvb/FoqJH:+Cd+ISj5hwZh9ap9oqJH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c76a82b1bde9c029858ffe5c5078a035_JaffaCakes118
Files
-
c76a82b1bde9c029858ffe5c5078a035_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 394KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE