Static task
static1
Behavioral task
behavioral1
Sample
1a5c4531cf71e84b65de35ee431d5fb3_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1a5c4531cf71e84b65de35ee431d5fb3_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1a5c4531cf71e84b65de35ee431d5fb3_JaffaCakes118
-
Size
156KB
-
MD5
1a5c4531cf71e84b65de35ee431d5fb3
-
SHA1
83f0c2ff79fa323dd975c7ffb05bad0b3d4858af
-
SHA256
ca9777890af2d0f5e217aec1f52a17278179a8696cbea23a86ead7033717eb83
-
SHA512
d542f56da8cf9fd73f5b0f218d3c8567ec93c9686948a031581a3015e9a4c95810a3d20aa63ab4c8015e265a3ef999f21c8a61f022e96cc439359cffb3157bee
-
SSDEEP
3072:WOjuVAzSf2qMipi6u6T0XsPBvLsT3xO/EZ3:WO4ZelImy0caThy0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a5c4531cf71e84b65de35ee431d5fb3_JaffaCakes118
Files
-
1a5c4531cf71e84b65de35ee431d5fb3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 45KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Perc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Perc Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ