Static task
static1
Behavioral task
behavioral1
Sample
c834a91b5b237d8784d174e86fe387d2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c834a91b5b237d8784d174e86fe387d2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c834a91b5b237d8784d174e86fe387d2_JaffaCakes118
-
Size
1.2MB
-
MD5
c834a91b5b237d8784d174e86fe387d2
-
SHA1
563590487df145a543e14e80d0fe16b100798772
-
SHA256
7a956d2764fb655b2e34f469372080f072a60a51a39c04a0315626152b8e252c
-
SHA512
97f18f3054f4c466e4209530437890f6dc6569d401c9202a90c7fb60586612aa51d3d83743cc4977554881df5ef459de8298829a849bed13b5e15b8f7060be7f
-
SSDEEP
24576:FxHnsnCeOrczNb0GGfpIwbGrUHjzpgkPmxgsG87T:pGPM7GrUHj1X7n+T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c834a91b5b237d8784d174e86fe387d2_JaffaCakes118
Files
-
c834a91b5b237d8784d174e86fe387d2_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 646B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ