Static task
static1
Behavioral task
behavioral1
Sample
0e4e5d47310a74ba5b4cac0b7b601b99_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0e4e5d47310a74ba5b4cac0b7b601b99_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0e4e5d47310a74ba5b4cac0b7b601b99_JaffaCakes118
-
Size
687KB
-
MD5
0e4e5d47310a74ba5b4cac0b7b601b99
-
SHA1
4083f607795c02625469a9794d3e84b03e1151a3
-
SHA256
19de9dcd5c58ad8f0a2aa8e03e0b55552829413105b957e6a3a36380b1c77afd
-
SHA512
686eb58d065076cf433ceb578fe200709ef1a67646713b9798140f4efbfd86ee053ec1f9a47da8c008fa2ff1b2168857d3078eb420428ae8abf4fca1cd2093a1
-
SSDEEP
12288:X25wNkOZRVjpb+aOiCPAUhlQ5YmGnJfF3Z4mxxs+jAh/078w5jAlCt:lkO7hp+aODAmlQGTnJfQmXs+ss7/lAc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e4e5d47310a74ba5b4cac0b7b601b99_JaffaCakes118
Files
-
0e4e5d47310a74ba5b4cac0b7b601b99_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 371KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE