Static task
static1
Behavioral task
behavioral1
Sample
1ac53b9f7dd8c8b71ac6c6b95f86cec5_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1ac53b9f7dd8c8b71ac6c6b95f86cec5_JaffaCakes118.exe
Resource
win10v2004-20240319-en
General
-
Target
1ac53b9f7dd8c8b71ac6c6b95f86cec5_JaffaCakes118
-
Size
192KB
-
MD5
1ac53b9f7dd8c8b71ac6c6b95f86cec5
-
SHA1
7f73a5db4675045e3a287a70d588baed23c92661
-
SHA256
d8a1537b7a0d45e8eb39b1574dacbf7644901847addb9ad0d1c8482467926199
-
SHA512
723ef1af8db5947c8838012fb2137578005ed0e9f2866572f5f426cec8d4fc20463c6404a6142c6efde489f5bfe8a6faada5727f9a50fbb8df263754e8343809
-
SSDEEP
3072:+ihaoPYykUwQnmjW85sQoWOQFLgwM/yfJDtYJzEp55letpFc:+iAoiBQnp8uQoWydgEs5letpF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ac53b9f7dd8c8b71ac6c6b95f86cec5_JaffaCakes118
Files
-
1ac53b9f7dd8c8b71ac6c6b95f86cec5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ