Static task
static1
Behavioral task
behavioral1
Sample
02167eb953d42e3370d3f0a61d1636d8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
02167eb953d42e3370d3f0a61d1636d8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
02167eb953d42e3370d3f0a61d1636d8_JaffaCakes118
-
Size
21KB
-
MD5
02167eb953d42e3370d3f0a61d1636d8
-
SHA1
8e0600d2a93a61b04799f064f15c66e1973917b1
-
SHA256
68edde32c8e6ea82cbf31687de8b3bdfffa6286cba8b53bd31ad54536d7c5e58
-
SHA512
6f7e366b0c6bb98c85712081a10b1be83fe26a016df453f135b6d936ee6df189dfe16a08e7d2f4386b57ed0b9e9a3d07a92b56a982d468228f55d0f5c7cab88b
-
SSDEEP
384:Ga2Lsy5YtyUGJOHBJ7xvP6FFq/LZke5MjBzm/J5uOYTNF64Wx:Ga2obtyUu8JAfuZkewBEPh8D4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02167eb953d42e3370d3f0a61d1636d8_JaffaCakes118
Files
-
02167eb953d42e3370d3f0a61d1636d8_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE