Static task
static1
Behavioral task
behavioral1
Sample
442474db79a204bf72c6785e2cce073c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
442474db79a204bf72c6785e2cce073c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
442474db79a204bf72c6785e2cce073c_JaffaCakes118
-
Size
111KB
-
MD5
442474db79a204bf72c6785e2cce073c
-
SHA1
de1818819a68a24d06dbca0145e1ec4d542f0c72
-
SHA256
9d0799b7ceafe069f1360493c0e8ad0e8c956e6388e2b39cf75eb4a472f37522
-
SHA512
f9966b6ad14be79246434f6c9c8dfff6f6ab2bc718450d04ee6a6a7ce0772a20020d4a585e7401c0d994a82ae576c7e6684f2f920f7bd699c60df48cf69c145c
-
SSDEEP
1536:BsWTlpyQ4dCw8ip8juprHEkhNnXBt3sd4wTv8724o7rMk4YH7XGsiKJQc4RbQ:vpT4dCElPt3sd4yj4o7dLv3apRU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 442474db79a204bf72c6785e2cce073c_JaffaCakes118
Files
-
442474db79a204bf72c6785e2cce073c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ