Static task
static1
Behavioral task
behavioral1
Sample
04549f35c21c4aa71527e8a11045c4b7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
04549f35c21c4aa71527e8a11045c4b7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
04549f35c21c4aa71527e8a11045c4b7_JaffaCakes118
-
Size
377KB
-
MD5
04549f35c21c4aa71527e8a11045c4b7
-
SHA1
23c339b0c22a7f30ad7c3bd728aada8807b7288a
-
SHA256
a13f55f6a170311598a804976c585b2f4bee325863f82ea0fc27ed5373486880
-
SHA512
23c5d740d1760f263de3c8f0feb46bc1f1468d62364e0d9df03068e91557b31516b3363cfba6145df38b73f6dc839624af5df255ea5c31e481abd1382c3342a4
-
SSDEEP
6144:WhaPMHF2idZecnl20lHRxp3gEncduD7yB9VCO6Sco4q8+dE6CqT:WoqF3Z4mxxLDqVTVOCT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04549f35c21c4aa71527e8a11045c4b7_JaffaCakes118
Files
-
04549f35c21c4aa71527e8a11045c4b7_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 21KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 338KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE