Static task
static1
Behavioral task
behavioral1
Sample
a93e6578f37edef9ed42a4bf173e1537_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
a93e6578f37edef9ed42a4bf173e1537_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
a93e6578f37edef9ed42a4bf173e1537_JaffaCakes118
-
Size
474KB
-
MD5
a93e6578f37edef9ed42a4bf173e1537
-
SHA1
fb129efca54d1a191d53c318bd54279eb077cbaf
-
SHA256
44f1a01ff16e66bcb58919bbc92ddcc8a166d92f1afe331c91d74a0cb2a2f37d
-
SHA512
4410297f239285d09d1222cb8e3620a26f565c25ca8a3bb60937c08e9538cc8430c6e992b6566eabe7c59891c35544b723ba6e585445054104d2d8cb0bd75155
-
SSDEEP
6144:UZfec9EbXDk6RkUKxnmy+g4+nmy+g4hl+lXDZJfLufs73dOk0XDpNjNOpys8r:UZWtI6RkHtYeZJys73dOvXDpNjNe8r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a93e6578f37edef9ed42a4bf173e1537_JaffaCakes118
Files
-
a93e6578f37edef9ed42a4bf173e1537_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ