Static task
static1
Behavioral task
behavioral1
Sample
1a788875569f680d099644306007f2d7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1a788875569f680d099644306007f2d7_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1a788875569f680d099644306007f2d7_JaffaCakes118
-
Size
377KB
-
MD5
1a788875569f680d099644306007f2d7
-
SHA1
416b3218c7f9d863f8af815372319e93d91554a6
-
SHA256
b076a3f18c9cbaef545dc70ddfbe83fe6bf302f96f7a6e08b35a706c9db26223
-
SHA512
39aeecda7e833000623761e6e7d5dc4f7fbd0bdb07b3e22f9cefa0af11dfb373d812202e857d21d895a7c3c5465837a517b9f8f6185df09f9281ea89d8ad2eea
-
SSDEEP
6144:DXCV3XHx+zsxYuasJ5Iguq2dr5YpvPlzCArvYLHdJVnZhnDNodqhPxLRjj:DXSXH8zsxYuaswgp5zYL1Zh+0Vxj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a788875569f680d099644306007f2d7_JaffaCakes118
Files
-
1a788875569f680d099644306007f2d7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tss Size: - Virtual size: 561.0MB
.idata Size: - Virtual size: 400KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.null Size: 372KB - Virtual size: 376KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE