Static task
static1
Behavioral task
behavioral1
Sample
d205ceeaf2b7b0b6f090a4eb829bfc06_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d205ceeaf2b7b0b6f090a4eb829bfc06_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d205ceeaf2b7b0b6f090a4eb829bfc06_JaffaCakes118
-
Size
369KB
-
MD5
d205ceeaf2b7b0b6f090a4eb829bfc06
-
SHA1
65e94a8caf48efd099743f16da7f482ebfd26b47
-
SHA256
d98005373a3b15722c68e46581c66f084f95c961afe786119750b2a23beb9b30
-
SHA512
51d883a7d76578cadfcbd3b1d3138ed60f6e3bb4c0b9eb43a314ca9474ba25686913a0f5be9d9a30a600720797e7b1fe2607d8a3b476e2fb739403851a0d0c71
-
SSDEEP
6144:GW2fZnURdwGUZdp6fmsKlaJ7oOngjiaLLMzweRjKTgTvytLTSU0BZ:kta4wfpKlEEOnKK3mTgbylSUAZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d205ceeaf2b7b0b6f090a4eb829bfc06_JaffaCakes118
Files
-
d205ceeaf2b7b0b6f090a4eb829bfc06_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 550KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE