Static task
static1
Behavioral task
behavioral1
Sample
14ef8b115702ff09fc15a4d45fcd8b14_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
14ef8b115702ff09fc15a4d45fcd8b14_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
14ef8b115702ff09fc15a4d45fcd8b14_JaffaCakes118
-
Size
282KB
-
MD5
14ef8b115702ff09fc15a4d45fcd8b14
-
SHA1
a558279eb0cce122180f71bff61aac577865ba5b
-
SHA256
b5b5d1b0bf10748c8bab210bc23f0c45fa056b1d82642de8a49c25c7d7230b88
-
SHA512
7ef90b7f243eff24506379c66679caaba2b3bd8a67c98b1dac754370f4b6d663b846aad4d18da8d563795594ed4dbdf9cb0098d4f57c3552825e6d69185d0c9a
-
SSDEEP
6144:nPRZ3IQBEQAEhy/6UiIMyp8HKmHxEKRqWOMtFs7PipqyZR8:n5Z3I6pU/6U1MyUbHN9OME7hp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14ef8b115702ff09fc15a4d45fcd8b14_JaffaCakes118
Files
-
14ef8b115702ff09fc15a4d45fcd8b14_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 259KB - Virtual size: 258KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE