Static task
static1
Behavioral task
behavioral1
Sample
f51e7f6a471a5b84c08b92f09a867dbc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f51e7f6a471a5b84c08b92f09a867dbc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f51e7f6a471a5b84c08b92f09a867dbc_JaffaCakes118
-
Size
439KB
-
MD5
f51e7f6a471a5b84c08b92f09a867dbc
-
SHA1
8b9f95ed08bf1e885fb1d103f40fe8813c616cd6
-
SHA256
deb3f15992250af4026a385e6085844cc94a1218ec13764e007605c4b09c2e23
-
SHA512
a6dc26d9f7ca5a8d1d18dab75cda3ac4af14829be989033684527f6f547737252dfc96d479543f0667a15bc6d120bdda5e6a8485315084e4d6abe0375901bbc5
-
SSDEEP
6144:nIfigscQ/3I8ALGRdOmFqvlo7HzOwhHWlfaX6g1m3Er8y857Ov3FhGdR:al7j8ZRomGa76wk/g1m3ErTAOv3FhGdR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f51e7f6a471a5b84c08b92f09a867dbc_JaffaCakes118
Files
-
f51e7f6a471a5b84c08b92f09a867dbc_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 289KB - Virtual size: 289KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ