Static task
static1
Behavioral task
behavioral1
Sample
de660a67da334a74fbe4116c13688d08_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
de660a67da334a74fbe4116c13688d08_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de660a67da334a74fbe4116c13688d08_JaffaCakes118
-
Size
241KB
-
MD5
de660a67da334a74fbe4116c13688d08
-
SHA1
3ba09745c6b38659d63a6307b3327be3ed61495d
-
SHA256
75a2063e8a7592e76471d86610935638008cf563e2827fa3de51763137f6b11a
-
SHA512
e57c5d0cecdbc457bfb552a1b5e3c399e2889ae8590b7808f8f24a9de9a3819dbc6e6aad13424a34871eec07fd691a65f728e121fd5c9d46f9aaab0037799391
-
SSDEEP
3072:9M1cwa7Np7HAF0oMUlaJqi6mqgDoh9auHV9MkpocxeVbMyIuqJk:9MxyIF0H0iqg0CuHV4VJIpJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de660a67da334a74fbe4116c13688d08_JaffaCakes118
Files
-
de660a67da334a74fbe4116c13688d08_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ