Static task
static1
Behavioral task
behavioral1
Sample
d1a5b7adcb596679837edf8f3a958aee_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d1a5b7adcb596679837edf8f3a958aee_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d1a5b7adcb596679837edf8f3a958aee_JaffaCakes118
-
Size
542KB
-
MD5
d1a5b7adcb596679837edf8f3a958aee
-
SHA1
0ae2c0dd13ee6939576c82bd55fbf9bbc586f0d6
-
SHA256
11754a94b85ebe3f43e0e3ae120a71c175e3e3deaaa0454bfc8deac3562a05fc
-
SHA512
3e05f0b28c4139d686401fe21c4ad2c118da06f7e8fca57bfce30244ceccd2af1a77469a8f0ba1db4687d841bd7dd4016b28fcd5dfa90c64f9a6c95b51f4bf1a
-
SSDEEP
12288:Cta4wfpK286J2AMr9pnNd7MUE1/kifiWvZ+:Cc0286O1TAh18IDZ+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1a5b7adcb596679837edf8f3a958aee_JaffaCakes118
Files
-
d1a5b7adcb596679837edf8f3a958aee_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 609KB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE