Static task
static1
Behavioral task
behavioral1
Sample
261dae2a9b8590f975a566391faaa81f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
261dae2a9b8590f975a566391faaa81f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
261dae2a9b8590f975a566391faaa81f_JaffaCakes118
-
Size
2KB
-
MD5
261dae2a9b8590f975a566391faaa81f
-
SHA1
7477a3076e8943b1b5503636b086e808c8e0e63e
-
SHA256
6397319692b6bc420924a8d631fa7955759b2edf8bceadddf3670f0bf7c3cb95
-
SHA512
f663776fcfd233b5465e317e0f275c64685b82f7d36293b1b71cd5fab9be998e2252daa2ecf84287d892443ab6ff79c38193faaea62a6a77dc9563478eea052c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 261dae2a9b8590f975a566391faaa81f_JaffaCakes118
Files
-
261dae2a9b8590f975a566391faaa81f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ