Static task
static1
Behavioral task
behavioral1
Sample
d090b952d618300aaf81e8ac34d45928_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d090b952d618300aaf81e8ac34d45928_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d090b952d618300aaf81e8ac34d45928_JaffaCakes118
-
Size
4.7MB
-
MD5
d090b952d618300aaf81e8ac34d45928
-
SHA1
efdadc1b3bb384b79c1d96e4a9ecdcc4a5f32c96
-
SHA256
e28e7ebcb765605a4d80918af2f3810939217497edf4aa50722b99254696b348
-
SHA512
ae66ee234e81950d10621648d862ba7a834d516c4873473bf1e3eb3b81dff55bd79207c4cafa2f6e83557a8f6b0d4f6ac0cfc12d9148b5e459976a6ba14c7e0c
-
SSDEEP
24576:DqhWkVkOG6rod4nZebdignZebdignZebdignZebdignZebdig:DAWkVk56sd4Z2fZ2fZ2fZ2fZ2f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d090b952d618300aaf81e8ac34d45928_JaffaCakes118
Files
-
d090b952d618300aaf81e8ac34d45928_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 350KB - Virtual size: 350KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ