Static task
static1
Behavioral task
behavioral1
Sample
1a4daea210ce5f09f8782ca2f175d86e_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1a4daea210ce5f09f8782ca2f175d86e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1a4daea210ce5f09f8782ca2f175d86e_JaffaCakes118
-
Size
329KB
-
MD5
1a4daea210ce5f09f8782ca2f175d86e
-
SHA1
e92e9cafc1a201aa3ad7a0907e903bfdb57745a3
-
SHA256
676e486622296ed6b2c98070d27375d69bdc39cd021f38b48cb11d5a23501443
-
SHA512
7233a62f00b8997561005cc7c4315406ef81fc3b9a8cc6c4b140c91173c851e5ebce8f1b37d1e0e6394c769049bd8789d43763d49ace67aa8598423302aaf32b
-
SSDEEP
6144:/FH9MVifbIRWxsvb2x3jSchui8xPa+yKq3aZgvte15p7IdodMVUGBszXr:/FH9acbIRWxJx3jScPkPaDx32N15p7Io
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a4daea210ce5f09f8782ca2f175d86e_JaffaCakes118
Files
-
1a4daea210ce5f09f8782ca2f175d86e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.aspr Size: - Virtual size: 532KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspr Size: 328KB - Virtual size: 332KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspr Size: 328KB - Virtual size: 328KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE