Static task
static1
Behavioral task
behavioral1
Sample
1a9083abbd80cd3ee8eeecdd5d2ab781_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1a9083abbd80cd3ee8eeecdd5d2ab781_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1a9083abbd80cd3ee8eeecdd5d2ab781_JaffaCakes118
-
Size
143KB
-
MD5
1a9083abbd80cd3ee8eeecdd5d2ab781
-
SHA1
500f3a0e2adad947e258448a84b332c7a7259796
-
SHA256
a4ddccd9278b4f0fc24dae13b9433984b6bfd3788a9b5cc5e97fcf6e73c84635
-
SHA512
0121fc366633e67bc4b7d9abf122f8c37bfa07b30ac33db3f5fcad010e7102794cf9351b33aa05404d4bb50e0d611ea2fdd4972228bd7b71c2925ddb88e141e0
-
SSDEEP
3072:QYbY9zxWnws27MsXelJ0nh6YWrcc9dSaiKj4nqcAUJf4:QYbYuNK8FY2R9dS+0ndAw4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a9083abbd80cd3ee8eeecdd5d2ab781_JaffaCakes118
Files
-
1a9083abbd80cd3ee8eeecdd5d2ab781_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 396KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 142KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE