Static task
static1
Behavioral task
behavioral1
Sample
d17caf29301986a01a9e1d5f72f204f7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d17caf29301986a01a9e1d5f72f204f7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d17caf29301986a01a9e1d5f72f204f7_JaffaCakes118
-
Size
549KB
-
MD5
d17caf29301986a01a9e1d5f72f204f7
-
SHA1
1afd024482e39209039740461b50272c9eb74268
-
SHA256
07c71a12fac7181e91cb9c0d5ea2ecbc564135c297bdc9ab7d09197b9b8ff0ca
-
SHA512
956eee7de43f347d236d9003ed15b12e33eb930edff7812635c6e5351117a2ad72995465099a4afd1e5d9a9077e551af8737ed62c002613a377999f42303d316
-
SSDEEP
12288:TNIoEVMUlg3/XVV22g/k4egvTbpIr830F/5EvR6x9:TgMUlS1g/k4bvZpkB50K9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d17caf29301986a01a9e1d5f72f204f7_JaffaCakes118
Files
-
d17caf29301986a01a9e1d5f72f204f7_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 523KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE