Static task
static1
Behavioral task
behavioral1
Sample
1aad9c346204d936a3a5937f08d575b9_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1aad9c346204d936a3a5937f08d575b9_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1aad9c346204d936a3a5937f08d575b9_JaffaCakes118
-
Size
100KB
-
MD5
1aad9c346204d936a3a5937f08d575b9
-
SHA1
b600fdaf85f4b0c921dd1a62776b020a4eb23942
-
SHA256
50222b27d94d38c57325a730aeece8550990998acb8b4accdb83e36da2dbcf20
-
SHA512
cea40418e9552cbb8af05634b57a9479a08178ffb1619b4f87a5a385ae1e077d8d56937aab9a3809a3688f4b70c9a77851f34ed0ea8dfdba84a97d145dbde0f0
-
SSDEEP
3072:gKdsK6MJfaLPpu/t8uLzPWKbLYRVR0MxWyN1/b2pAqXtI2VZ:gKdQ6ik/t8uLLWfRVOMxp1TUAIZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1aad9c346204d936a3a5937f08d575b9_JaffaCakes118
Files
-
1aad9c346204d936a3a5937f08d575b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
urolif Size: - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zb97r Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9 Size: 644B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE