Static task
static1
Behavioral task
behavioral1
Sample
07002db88ad4f6f3c541e717604c400d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
07002db88ad4f6f3c541e717604c400d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
07002db88ad4f6f3c541e717604c400d_JaffaCakes118
-
Size
77KB
-
MD5
07002db88ad4f6f3c541e717604c400d
-
SHA1
40df42ace2da0acd63e678388f9dd1629f3e8e14
-
SHA256
70169c1e6a8d3537048a103af514104ebe157814780b0781967598f0add87a2d
-
SHA512
1d8d8e35b181881c9a33f38b91c27eae9e478e253cfebcec30e4854df60ee3548e9d486b22e6271c813b60c7be350cbb4e693a0516a89906d62cdd5ad9ca068e
-
SSDEEP
1536:3Zn2TAqWrIGCwNtK83YdKRnYK9ck9m89h9qy840UcG4cs:3Z2TAaGF9yKRnuyh0FGq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07002db88ad4f6f3c541e717604c400d_JaffaCakes118
Files
-
07002db88ad4f6f3c541e717604c400d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 542KB - Virtual size: 542KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE