Static task
static1
Behavioral task
behavioral1
Sample
d4abe58794b253b4a5d7f73f98c5f32a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d4abe58794b253b4a5d7f73f98c5f32a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d4abe58794b253b4a5d7f73f98c5f32a_JaffaCakes118
-
Size
17.2MB
-
MD5
d4abe58794b253b4a5d7f73f98c5f32a
-
SHA1
b05dcd1569d77e3b6fefb4b65976f3af74890aa6
-
SHA256
820b30ed71638b8bf633eec9c5d4319d77055e7f7241d48b463710b0102d0e1c
-
SHA512
420d332c8c1e89f863437f3650ddd50d66201d45255935699da487c4ce4e39dc5a3a6018b466209f24effd6ca947bdbe541601448b1e2c8a27cc7d3a4baec57c
-
SSDEEP
393216:H1WpRZdVINmJOodngdP54j1QbSUFUcXb1cE6MY+koz5d3SY:H1WprdVIUb1QmUlL1ccdF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4abe58794b253b4a5d7f73f98c5f32a_JaffaCakes118
Files
-
d4abe58794b253b4a5d7f73f98c5f32a_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 17.2MB - Virtual size: 17.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ