Static task
static1
Behavioral task
behavioral1
Sample
f9e5cda69226d4d58f0523b24dff28e3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f9e5cda69226d4d58f0523b24dff28e3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f9e5cda69226d4d58f0523b24dff28e3_JaffaCakes118
-
Size
432KB
-
MD5
f9e5cda69226d4d58f0523b24dff28e3
-
SHA1
a37e7737e4bb9cf7066ad7fd743d4d5a78d3da19
-
SHA256
b7a16bc5fec644b88938b7486070993e6eff518b848adb9b26b82662d96147ef
-
SHA512
bdbad1d35ecc4d794871dd29dc6ef4867efc7f09c694c5f46bfdd5cee17d021695e7d3efc7742f82da264c4e72cb02875a09fe1c7c0a970fc694e0cd0bbfb0f7
-
SSDEEP
12288:H91E+6mvnKeWKCJF3Z4mxx3+jAh/078w5jAlCb:jE+LvWJJQmX3+ss7/lA+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9e5cda69226d4d58f0523b24dff28e3_JaffaCakes118
Files
-
f9e5cda69226d4d58f0523b24dff28e3_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 116KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE