Static task
static1
Behavioral task
behavioral1
Sample
de5f1841cf072b45cb16c846b97e40de_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de5f1841cf072b45cb16c846b97e40de_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de5f1841cf072b45cb16c846b97e40de_JaffaCakes118
-
Size
765KB
-
MD5
de5f1841cf072b45cb16c846b97e40de
-
SHA1
bf0e5bf7d2c4afe29eff95b5a04035c549162602
-
SHA256
7b20179249a9270b6560c3d69cda9907501b69830ff8228b211cebe065eec0b6
-
SHA512
f394c71cad6b8c27d4a7466f2b8b9554adcfdf3174709e6d3a88df493f2723754f5d7a6beb8ed4cc7a68adeb539070822b5f8c92058d6afa14e0511f76433343
-
SSDEEP
12288:yqo5BXJJ4pOe3zb+jIlYGKoNAw2OK4VXdK31eGT3K9MWxEcDF3Z4mxxQIScEVnW4:AB5qAeDbgLGKIAw2O3XAQ19MEEcQmX7S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de5f1841cf072b45cb16c846b97e40de_JaffaCakes118
Files
-
de5f1841cf072b45cb16c846b97e40de_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 449KB - Virtual size: 460KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE