Static task
static1
Behavioral task
behavioral1
Sample
c948d31e4011366cb636c89f02f464ef_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c948d31e4011366cb636c89f02f464ef_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c948d31e4011366cb636c89f02f464ef_JaffaCakes118
-
Size
427KB
-
MD5
c948d31e4011366cb636c89f02f464ef
-
SHA1
d5e2222ea4f759ad3b892eb427117ed2be181423
-
SHA256
1a89981569b6e317a45dc8dec5920465b66a91b3874c48bc1459b329c73561bb
-
SHA512
6cdecf8f29803ee0d05b372f7a835f7d3b11a44bf0b83e993d0d109ad93187d55aa11d9b7e667cfaedae22713aee9515a4b1f9fc1030adc8a6ee25c657db429c
-
SSDEEP
12288:D1/VJbyn5T+0R9BM8EldRk0Gre85nIpIx:Zbyn5T+0R9W8EldPPc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c948d31e4011366cb636c89f02f464ef_JaffaCakes118
Files
-
c948d31e4011366cb636c89f02f464ef_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 290KB - Virtual size: 290KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ