Static task
static1
Behavioral task
behavioral1
Sample
1a3a8b9fa202573f32f5dad52c6df9fe_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1a3a8b9fa202573f32f5dad52c6df9fe_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1a3a8b9fa202573f32f5dad52c6df9fe_JaffaCakes118
-
Size
60KB
-
MD5
1a3a8b9fa202573f32f5dad52c6df9fe
-
SHA1
a6830fa1e097551f2acaec0da462f021503e2480
-
SHA256
13cecd44496699248b6141bdddce12f2cd7c2444b930cbfd6892fa7f89c89bfa
-
SHA512
8dcd5c46cf33b3fec0c44243cf23c23720081fb3672fb1869b4bcc372605b26d2633ae010bbc192142a5e3d8be9dccdff7684a33555f68178e4cbfaadc51aede
-
SSDEEP
1536:coKsaQs8+Ftiaxw93Q26tMKfhUoFRKqbe0XGU3eLAbsLRO20B0:a8qBxwB5wMK6Qb4U3eQs9zI0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a3a8b9fa202573f32f5dad52c6df9fe_JaffaCakes118
Files
-
1a3a8b9fa202573f32f5dad52c6df9fe_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.dt_i Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dt_e Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 134KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ