Static task
static1
Behavioral task
behavioral1
Sample
01a13dbdd2df53caaf11a1683eb7c656_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
01a13dbdd2df53caaf11a1683eb7c656_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
01a13dbdd2df53caaf11a1683eb7c656_JaffaCakes118
-
Size
188KB
-
MD5
01a13dbdd2df53caaf11a1683eb7c656
-
SHA1
8310621e753ef97a4211137eb58a08611ec673fe
-
SHA256
00280910787387296b5ec446352c6c47e28ab24608a447918a932b0c9f7aff11
-
SHA512
ee921181263c3aa470d484cee6004ac79874d046b139ec9927af2b2ce12b1d604cae02f67012e965c4e691d0c3e3fb625e301badd7b9c67e95cc04d8b976aae4
-
SSDEEP
3072:or2exnVe3rlK4zJMpAA18iUqFqmKmBGIFYxyWF/rblY32FB:orbx6lKsMeA18I8keblY32F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01a13dbdd2df53caaf11a1683eb7c656_JaffaCakes118
Files
-
01a13dbdd2df53caaf11a1683eb7c656_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ