Static task
static1
Behavioral task
behavioral1
Sample
1aacec60771c7e281c5119cc56becf96_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1aacec60771c7e281c5119cc56becf96_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1aacec60771c7e281c5119cc56becf96_JaffaCakes118
-
Size
694KB
-
MD5
1aacec60771c7e281c5119cc56becf96
-
SHA1
5f5f69b6e28a2ed25f0df4f777c1cc65e655f07b
-
SHA256
5d41e4eb4cdb54ddafb3d9ef79aafddcac3339e17bf74dfa17c465bce20967fe
-
SHA512
4eb50eeb5a4bdbbb3d0829fa5ef142cbba44aee2afc5b7befbac0746259f77aba07f1c0c2f2a4eb7947b34f451758642208f16bbd88770d0e1fb5bfabb67b836
-
SSDEEP
12288:IAdox39hiL27M0PHP6I1N4o5prpFocd+UA3Rg5DNRpmyrDxSSFUd6JwiQBgSBgSB:I3hiLHYHP62NJ1p7DcREDnpmyr1rFUff
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1aacec60771c7e281c5119cc56becf96_JaffaCakes118
Files
-
1aacec60771c7e281c5119cc56becf96_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rxdata Size: 114KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.txdata Size: 549KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcdata Size: 8KB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE