Static task
static1
Behavioral task
behavioral1
Sample
d9e3ae2048408f3a05ae1acdfbd64a5f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d9e3ae2048408f3a05ae1acdfbd64a5f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d9e3ae2048408f3a05ae1acdfbd64a5f_JaffaCakes118
-
Size
327KB
-
MD5
d9e3ae2048408f3a05ae1acdfbd64a5f
-
SHA1
c03996fba78d6d0a8613849988b4d90f10ef8c8c
-
SHA256
4949c960024e495e27211068100687af518535962425a8592f31dd9f9270a9d1
-
SHA512
ef60283360e5e5e272e1fd57b31a76f10c424358eaea6be76cc0cf954404fbd14ccf3405126c76494383fa5a39ad82a64305de53d0a5516310615ba7a0071d00
-
SSDEEP
6144:bFml/qNAl0VsIzwIiYVRo9uxRCBtJOs0Q2zkvy0JPHehIV:ZmlCussIz0YY8xRCBtJOsczzCPb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9e3ae2048408f3a05ae1acdfbd64a5f_JaffaCakes118
Files
-
d9e3ae2048408f3a05ae1acdfbd64a5f_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 655KB - Virtual size: 655KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ