Static task
static1
Behavioral task
behavioral1
Sample
efa5b64c060ea5aefc9be4fca1c123ee_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
efa5b64c060ea5aefc9be4fca1c123ee_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
efa5b64c060ea5aefc9be4fca1c123ee_JaffaCakes118
-
Size
423KB
-
MD5
efa5b64c060ea5aefc9be4fca1c123ee
-
SHA1
5b6b8ced3cb40df89d311a28a32fe6811fbd1e38
-
SHA256
e551ae725b3c41fd9b6d193e9ecc54c35f8308c7e9ae069ab5e9c5357f408227
-
SHA512
7b1ec78cab1fbd99044df72561a0385d95be59903edb12b2e58a1e39269669a5910b2e0176c97e4bea5eb3e30e42f88336d442523506f06595a129192eb5b6dd
-
SSDEEP
6144:AvJzbbugYZX7TO19vnEV/j0VyCHHieRA2QOCnzbwBJnTouwlhik:AvJzvleXG3vsz9WQOCn3eJn4t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efa5b64c060ea5aefc9be4fca1c123ee_JaffaCakes118
Files
-
efa5b64c060ea5aefc9be4fca1c123ee_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 307KB - Virtual size: 306KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ