Static task
static1
Behavioral task
behavioral1
Sample
d71b7b65a0d5076171b93694649ca170_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d71b7b65a0d5076171b93694649ca170_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d71b7b65a0d5076171b93694649ca170_JaffaCakes118
-
Size
1.5MB
-
MD5
d71b7b65a0d5076171b93694649ca170
-
SHA1
e6892b1c04b99be0d412f18587f3c8413a10c6d6
-
SHA256
22f1135aca694dd10ff5ae36032ac397a5a84edb9642a6f3d77b82f74568f8b4
-
SHA512
552c8ffab1a84661110096dc1433399251015a6d23832be72f7de547a0437ed875077afd7113ceb45daa5d1fa55ede5925d2e9f039ba4b4e35d813a87a2c55a7
-
SSDEEP
24576:FgDgDpHObRl46iPZ9UIRLLy1urNCwax+Wc9mjJUJx7rHlcab3jyH:FgDgDM1lo9UcyEr8waxe4jJG7rFce8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d71b7b65a0d5076171b93694649ca170_JaffaCakes118
Files
-
d71b7b65a0d5076171b93694649ca170_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 365KB - Virtual size: 365KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 943KB - Virtual size: 943KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ