Static task
static1
Behavioral task
behavioral1
Sample
0c941aa6af0fe5a861f1fd21276f12a0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0c941aa6af0fe5a861f1fd21276f12a0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0c941aa6af0fe5a861f1fd21276f12a0_JaffaCakes118
-
Size
1.9MB
-
MD5
0c941aa6af0fe5a861f1fd21276f12a0
-
SHA1
af829ab34994c89f1b33c2f7a09c1c3d1b3548b8
-
SHA256
f5ee8b3258796386f30e29a81b270d67e9639cef5537142f54e103f1e2c6d1d7
-
SHA512
43b5c8da49785c184713fc6baeb802b9925d8849e2e184e185fd87b80c83a548544454f81ca9b1cc4e5d606d8d1681d690fda7a21818b8d6de96b61eea801097
-
SSDEEP
49152:yZIbesxBGhb95fa5cdabm1/GRool+hoXKrbm1KVQHz:KIxAhb95fwcdg0/mDF6rbm1KVuz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c941aa6af0fe5a861f1fd21276f12a0_JaffaCakes118
Files
-
0c941aa6af0fe5a861f1fd21276f12a0_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ