Static task
static1
Behavioral task
behavioral1
Sample
1816824111967b9b5a315dc84739a2bb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1816824111967b9b5a315dc84739a2bb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1816824111967b9b5a315dc84739a2bb_JaffaCakes118
-
Size
3KB
-
MD5
1816824111967b9b5a315dc84739a2bb
-
SHA1
5cdbde709d55fc649b28f5e4763a7953a799b453
-
SHA256
642b623d1672e9bca64bb812afd40d7bf3efb337f51e85c60f40e7c1c0007ae5
-
SHA512
f2fb591b893e9f8c01ba17c1ed61c717b5dd931cca77f689a45ab2ac55bd7e39c0a57b47b39570cc1a686decc1cad585f035e8c6bbcbbc1b41deec760e40aeed
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1816824111967b9b5a315dc84739a2bb_JaffaCakes118
Files
-
1816824111967b9b5a315dc84739a2bb_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 99KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ