Static task
static1
Behavioral task
behavioral1
Sample
02a7cd3225a1eb92d80c723cb71d6d8d_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
02a7cd3225a1eb92d80c723cb71d6d8d_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
02a7cd3225a1eb92d80c723cb71d6d8d_JaffaCakes118
-
Size
35KB
-
MD5
02a7cd3225a1eb92d80c723cb71d6d8d
-
SHA1
c592ae5f7ec030649ee04e814256117abbd4fb4a
-
SHA256
aaf516e3672c270f005e69c2b2e3cc669d14cf645486cbc025add9e98e8485f8
-
SHA512
2cd8bcdc40f38f6d1f688e8c098a538535a51a7e335a164362d0e2a813f8f199513f98e0bb7e06b601bc47d3bc6e4e13e8da01ca0f526594ec74208056d0ac4c
-
SSDEEP
768:w2gpFmvbXimSBlWRVJqYOF6dXm3jI3bOMO:KKiYAF65m3j+O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02a7cd3225a1eb92d80c723cb71d6d8d_JaffaCakes118
Files
-
02a7cd3225a1eb92d80c723cb71d6d8d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ