Static task
static1
Behavioral task
behavioral1
Sample
0417f3bde2b4c3ba70db8969d819f0ff_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0417f3bde2b4c3ba70db8969d819f0ff_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0417f3bde2b4c3ba70db8969d819f0ff_JaffaCakes118
-
Size
7KB
-
MD5
0417f3bde2b4c3ba70db8969d819f0ff
-
SHA1
f2e7997da4eb303f06e30ac14b13bac643f50bf6
-
SHA256
a4f55732b78b25e4ec9f372f732f58f9caeafd1e53e2d05b1324a05d59948a7e
-
SHA512
0de6187fa5cce411299cd3f228ad77b9095922555d4ca312e8af5b446adb04ca3153af2b5e6bb1041d6277abc688b872dd6d8c0f93d16c6b9e7ed020665f3edf
-
SSDEEP
96:lNhemWxIWMmVeE1kruhvUHbUjw/G8MXI5BHLj8:lNCVeE18wjwOBERLj8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0417f3bde2b4c3ba70db8969d819f0ff_JaffaCakes118
Files
-
0417f3bde2b4c3ba70db8969d819f0ff_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 637KB - Virtual size: 636KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 179KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.3MB - Virtual size: 19.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ