Static task
static1
Behavioral task
behavioral1
Sample
18146cedaed4894e483c3bfb93699201_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
18146cedaed4894e483c3bfb93699201_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
18146cedaed4894e483c3bfb93699201_JaffaCakes118
-
Size
17KB
-
MD5
18146cedaed4894e483c3bfb93699201
-
SHA1
7f3f881a9ef18549c95ce366e4e81599c8ffba25
-
SHA256
6e1a66a8ff3e01a478f49593fe8aec340ddcfe00af252b52610077cad6564a13
-
SHA512
1c0eee1037763d6d7fd294b87ac227ae8c2f4dd471a1b8a34d35f035f53e1f3407cc121e06f18fabf08544eabf1067fc025cbbdd316e3e180b6a63a48324513e
-
SSDEEP
384:2kHqBnfuNtxMY4znKxXElgS5g5WKPAS4FDuMYW1FpY:2/BnotxMhKEzhDum1o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18146cedaed4894e483c3bfb93699201_JaffaCakes118
Files
-
18146cedaed4894e483c3bfb93699201_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 482KB - Virtual size: 482KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 560B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 864B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ