Static task
static1
Behavioral task
behavioral1
Sample
d73ae8085a28193b15ba8c6ca3c2df17_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d73ae8085a28193b15ba8c6ca3c2df17_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d73ae8085a28193b15ba8c6ca3c2df17_JaffaCakes118
-
Size
689KB
-
MD5
d73ae8085a28193b15ba8c6ca3c2df17
-
SHA1
ff2279268d41bb52e6efc05faa72b194e3722ee9
-
SHA256
1259e5d96e83231c5f4735dbe8a0e28c1538f7a892ef1c76ecbc8474f8e0661b
-
SHA512
7357eb330497d2e6fc8f20736b1752d61a79fb6b2d2463d3241b3a2d65088c676bf9bf31ac14425b1a085137a0b5beda3935242888fd684461a828a9e398bed0
-
SSDEEP
12288:qoAkIUzFjKq5E/W42joQlIoF3Z4mxxiDqVTVOCH:D2GWqWAjn6oQmX5VTzH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d73ae8085a28193b15ba8c6ca3c2df17_JaffaCakes118
Files
-
d73ae8085a28193b15ba8c6ca3c2df17_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 372KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 315KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE