Static task
static1
Behavioral task
behavioral1
Sample
302230bfa04af157dafa4585ca63b63c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
302230bfa04af157dafa4585ca63b63c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
302230bfa04af157dafa4585ca63b63c_JaffaCakes118
-
Size
821KB
-
MD5
302230bfa04af157dafa4585ca63b63c
-
SHA1
c2b7b5a438b4df4ce0a05f4f68417be42360fe87
-
SHA256
c72b45f8e48f468a81cf7e523478223bb14c2551ce7ee745dff0767d27dd8f6d
-
SHA512
a7fe10bf9752e606e212ebac8df42b08c2438bb87286aacca451fb9e4e23d77eef37ea94a351a5c02d2d86d82c64736d13a7b79c1e0f48002540291c4cf46cb3
-
SSDEEP
12288:TYAaghDDeTMxl12jvAGviqFWkP6dgHnmpWTCvVSm6F3Z4mxxSDqVTVOCe:TRagBeoxlofJFtP6d8GWkuQmXpVTze
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 302230bfa04af157dafa4585ca63b63c_JaffaCakes118
Files
-
302230bfa04af157dafa4585ca63b63c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 505KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dawq Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE