Static task
static1
Behavioral task
behavioral1
Sample
de6d4c7ee34286c9a99a84f46b1f65fa_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de6d4c7ee34286c9a99a84f46b1f65fa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de6d4c7ee34286c9a99a84f46b1f65fa_JaffaCakes118
-
Size
93KB
-
MD5
de6d4c7ee34286c9a99a84f46b1f65fa
-
SHA1
c60dfd7dc10d0a60c8b3c26b4fdc9a5ddb0e5026
-
SHA256
984e76f1ccfd28f380d793bf03906be7990724a59fc547edff831e92d6b31d52
-
SHA512
1787833b69f24f5441bc2b8cc2fb2b8ca2bd11ca96a2b2fc0d3cd8d637673567bc84d00f6538718fd5a82e0f09d80a7bc332daae80032f00b6e8e3258e86829a
-
SSDEEP
1536:n0btVSPZXgxJqlbgat+HXEOZKnl3EznpmmIdhUpAmr/lCs:0bPfrxkkXzZWl3EznpB2hUplr9Cs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de6d4c7ee34286c9a99a84f46b1f65fa_JaffaCakes118
Files
-
de6d4c7ee34286c9a99a84f46b1f65fa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE