Static task
static1
Behavioral task
behavioral1
Sample
c756796e3ef17302d372694fb2829eb2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c756796e3ef17302d372694fb2829eb2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c756796e3ef17302d372694fb2829eb2_JaffaCakes118
-
Size
48KB
-
MD5
c756796e3ef17302d372694fb2829eb2
-
SHA1
f0900f1475e90bb025412cac97e2aee27fb9ac04
-
SHA256
d4e4ec0c89ca07809004e2f6fc12d02ca7dc51cc9967e0203e13583ea03a2e85
-
SHA512
d788c29eaccbb4f277283e7987d45d613c0d543086a615f8705867248ebbbaded83c12853f81aa6c7200f936ed4296cc49a81ec14ac65a23a66896a7b0706290
-
SSDEEP
768:/Igzo9bR3tfRzeqa6xshk11dRTGs2AHPj6SXfFi8+ykJHzd48ixw3ltBmh+BPNk1:gEo9d3Hes1b28jcVnvtKw3nYLN/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c756796e3ef17302d372694fb2829eb2_JaffaCakes118
Files
-
c756796e3ef17302d372694fb2829eb2_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ