Static task
static1
Behavioral task
behavioral1
Sample
f08a62947d8ce698f1aa0c196be1bd99_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f08a62947d8ce698f1aa0c196be1bd99_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f08a62947d8ce698f1aa0c196be1bd99_JaffaCakes118
-
Size
476KB
-
MD5
f08a62947d8ce698f1aa0c196be1bd99
-
SHA1
1b1837cd17572f45c3b4e4c819552de515fe4616
-
SHA256
ce07a55826e2a9de2eda9018aa6ab13f276780730e046763d718cc8bfd901d52
-
SHA512
06b845a5ff2d68d3172b13b1ac428c3cee4588484f3ff954412c1f5c78a0702ddf0d781c202fdc40e79c0752329f7be552b77dd411c34d94aea5f7268739284a
-
SSDEEP
12288:53Wu9r2aErcZt2EQ+q4pggNQ+KBnnuyx8:53DVVeEQWpnQ+KBni
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f08a62947d8ce698f1aa0c196be1bd99_JaffaCakes118
Files
-
f08a62947d8ce698f1aa0c196be1bd99_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 338KB - Virtual size: 338KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ