Static task
static1
Behavioral task
behavioral1
Sample
d4d4223022751f3f89a46a425bd6029a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d4d4223022751f3f89a46a425bd6029a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d4d4223022751f3f89a46a425bd6029a_JaffaCakes118
-
Size
201KB
-
MD5
d4d4223022751f3f89a46a425bd6029a
-
SHA1
b4ce8d818159408ca6f057dcda763e2c53bc6c5c
-
SHA256
80bc9bd1212c78559dc36fdc8c598f0202049c8a868fa5ba0e35bb9ee4d605fe
-
SHA512
ce9d1eb2553fe1b57e43e9570ed7403ad34fdb7274d6f8bcbc374c2226d1c126bceaac490784482c7ddd69f49e9e0458f3a137b7ba33eee6c9afd716dec05314
-
SSDEEP
3072:PlP7xXrsVRlZNd/LBJbt8r8TuUpLDzmJQ1LVW0RjyESFXUss:PPIVjp/Dbt8rauU571L80RjyEMUss
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4d4223022751f3f89a46a425bd6029a_JaffaCakes118
Files
-
d4d4223022751f3f89a46a425bd6029a_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 221KB - Virtual size: 221KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ