Static task
static1
Behavioral task
behavioral1
Sample
a97cd31fe85c66cc90fd1ab70d16af78_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a97cd31fe85c66cc90fd1ab70d16af78_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
a97cd31fe85c66cc90fd1ab70d16af78_JaffaCakes118
-
Size
977KB
-
MD5
a97cd31fe85c66cc90fd1ab70d16af78
-
SHA1
5bb843d909466cf8fc75190e46b786c75ea273bc
-
SHA256
f8b04f9751e081365d49b793402c508a76d54ace54faf6f31ef06134087e1db2
-
SHA512
2853ace7e651122e90304678e3131ffb0e42c34cddfc25550f2d058377e178f5309a580be11ed36ab70c719df09092d05f5bee96478017f0f5ba171bff370da6
-
SSDEEP
12288:UZWtI6RkHeZJys73dOvXDpNjNe8zyOB0Ju9OSeZJys73dOvXDpNjNe8zyOB0Ju95:UuhaHeZJ8NI8zyO5eZJ8NI8zyORrE94
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a97cd31fe85c66cc90fd1ab70d16af78_JaffaCakes118
Files
-
a97cd31fe85c66cc90fd1ab70d16af78_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ