Static task
static1
Behavioral task
behavioral1
Sample
dbb1a9f50ac38c96fef4c3250dda38f0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dbb1a9f50ac38c96fef4c3250dda38f0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dbb1a9f50ac38c96fef4c3250dda38f0_JaffaCakes118
-
Size
114KB
-
MD5
dbb1a9f50ac38c96fef4c3250dda38f0
-
SHA1
77ba18563e937f8cc6884e9128e0a56836dfc036
-
SHA256
17fffa3e6f045d9954c6eade551755056f6a2132963ad807912d34f226f33a12
-
SHA512
3554590a4362e7388c20ab7cc6a186dbaa93471fe19dbd78f33c90d47c4dc22e0e80e18bcd3a2614386a8a81770972ea39a35ec9901d95a4011739c07fd08651
-
SSDEEP
3072:/XAtWYKBlV+FGs287FF/oijKH+6moNOYvvmVYz9:fAoYKXV+52sFFgUIO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbb1a9f50ac38c96fef4c3250dda38f0_JaffaCakes118
Files
-
dbb1a9f50ac38c96fef4c3250dda38f0_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE