Static task
static1
Behavioral task
behavioral1
Sample
1a25e86c4979a5c076bb3b2763ffa092_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
1a25e86c4979a5c076bb3b2763ffa092_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1a25e86c4979a5c076bb3b2763ffa092_JaffaCakes118
-
Size
13KB
-
MD5
1a25e86c4979a5c076bb3b2763ffa092
-
SHA1
561e90160c46cca36021447a6f1d5e69dc46d8f5
-
SHA256
0802030eefca5104976b83e3fb37f545c67cf3c6bf190052f4f5a5bbe6080ec3
-
SHA512
03e0fe99cced825f83b34e8230dc1b1f98477f8886f78a9698a19799a6c01008c57cda9bdbc96b2cfad360ea3c0da1fb8a322b3616378887819c57e2a0d25670
-
SSDEEP
384:EU2eD2+tuG3+zvgY3uHxjVwGmgcgKPZKg+x66QmX:EUx8G3+7gYEJ3mRgKRKg+06
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a25e86c4979a5c076bb3b2763ffa092_JaffaCakes118
Files
-
1a25e86c4979a5c076bb3b2763ffa092_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE