Static task
static1
Behavioral task
behavioral1
Sample
a9f9091bc7ced000660acf41fcf0d485_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a9f9091bc7ced000660acf41fcf0d485_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
a9f9091bc7ced000660acf41fcf0d485_JaffaCakes118.exe
-
Size
1.2MB
-
MD5
a9f9091bc7ced000660acf41fcf0d485
-
SHA1
0f506b5a3ddd2e7e73a4221288afa4559d8e38c4
-
SHA256
ad078755cfb63de63a4e83c946ad755a953c8d23a35d0d202a04cce5ffb4bf5d
-
SHA512
026515600a085d9c0f9890e841ca14c255c92b06556a517cc476ece764f373dd658e3f0b6d9fddb17aed15d937633eeb5f735ae93b329f83706f38de6ca36162
-
SSDEEP
24576:lq8axXMDvf0vr0QrO46TbvAIgwFEKzUlqXpXgM+DaVlyaudLLQP5bG23VCx2xq:e8Iv7r36fv7UlqXpwDkYf1LQ5brlCmq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9f9091bc7ced000660acf41fcf0d485_JaffaCakes118.exe
Files
-
a9f9091bc7ced000660acf41fcf0d485_JaffaCakes118.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
HWAxCMck Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DrtWJgcR Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE