Static task
static1
Behavioral task
behavioral1
Sample
cf7dbc44d5164861f17be74e2b483ef9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
cf7dbc44d5164861f17be74e2b483ef9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cf7dbc44d5164861f17be74e2b483ef9_JaffaCakes118
-
Size
114KB
-
MD5
cf7dbc44d5164861f17be74e2b483ef9
-
SHA1
353f4dbdb401004f2ba42762c8b9f184b9068bb8
-
SHA256
d4a6d37d2172bf0ff3525429693f17357142c62e61683b3f8adfe614ca56ce6d
-
SHA512
2fb4c4203cc27c1c82697ae0dfee8e272cc149b0fb74c01e50a039735e6794953c40230427ad022d465e2936852da118ed150ef7d3ba8e8b927e054088c68788
-
SSDEEP
3072:/XAtWYKBlVmFGs287FF/oijKH+6moNOYvvmVYz9:fAoYKXVm52sFFgUIO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf7dbc44d5164861f17be74e2b483ef9_JaffaCakes118
Files
-
cf7dbc44d5164861f17be74e2b483ef9_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE