Static task
static1
Behavioral task
behavioral1
Sample
287ef4bcc8a5a6c5f592f61f262e8519_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
287ef4bcc8a5a6c5f592f61f262e8519_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
287ef4bcc8a5a6c5f592f61f262e8519_JaffaCakes118
-
Size
95KB
-
MD5
287ef4bcc8a5a6c5f592f61f262e8519
-
SHA1
da112d50ff08f699f3dd6037300711438a6d6a7d
-
SHA256
eea392742d560a467d2b96a2a3ba80c87b40e8dcff6a4d98728fcd8396a1a919
-
SHA512
af9cecd183bd58321f471181a5024e7e0c2fd946724c19b34b8071714bcd28c78f7f263f038908bac8102716b59cbcfc5fa27b77f365ac316a70ea7478e54048
-
SSDEEP
1536:E7X6715DJmOuqdHw8t03biXFUhj/yDzf+xfwVgUTRnDM/S+37kvRha98b8ZDpbIP:E7X67b3u6w8auXO/w1VrXEk5hak8ZVw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 287ef4bcc8a5a6c5f592f61f262e8519_JaffaCakes118
Files
-
287ef4bcc8a5a6c5f592f61f262e8519_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ