Static task
static1
Behavioral task
behavioral1
Sample
1aa07a62efcfe20033c8f5727e422783_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1aa07a62efcfe20033c8f5727e422783_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1aa07a62efcfe20033c8f5727e422783_JaffaCakes118
-
Size
378KB
-
MD5
1aa07a62efcfe20033c8f5727e422783
-
SHA1
1300aaf10a30ff7cf1067fcfcf3b9f0e29b63427
-
SHA256
c94d9331c1225847b91aaeeb137ed137e4d9a1e9e50822e90c4b02175b82a7b2
-
SHA512
9fd321e72f9194e02750cc54118aa5be42b03166bf2c0a4c733947b77eaec03e7a5b10fb2e20e56718b96d6d505c5851d7b7e826f91fd36259d46b42a647172b
-
SSDEEP
6144:ObqphrgSbdqx+69K5XiRUD7Eofd5Jsa+4gYHokZmuLFn+df/pwxhqMqyAdmiDKq3:oSbdoYBuO7Eofd5Ws3c8Fncf0hqHmWKK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1aa07a62efcfe20033c8f5727e422783_JaffaCakes118
Files
-
1aa07a62efcfe20033c8f5727e422783_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
0p0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0p1 Size: 377KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0p2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE