Static task
static1
Behavioral task
behavioral1
Sample
1afea183ec546e85c4fe013da29f9bb9_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1afea183ec546e85c4fe013da29f9bb9_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1afea183ec546e85c4fe013da29f9bb9_JaffaCakes118
-
Size
163KB
-
MD5
1afea183ec546e85c4fe013da29f9bb9
-
SHA1
25d648ae7364b9b3ca6692180e3dacacd201730a
-
SHA256
f29edea5751ce672f564f7c74c131469ef91cd29d780d42ab1c48e521c25fc26
-
SHA512
bb0b6834fce917f96b355e225da5b2250c8eb4993ed314667330bb55004c17c60aefe0dd24a95d8515c0e67dc664f17c0204c6964c5f6c9d2c80bb6c64389d09
-
SSDEEP
3072:ycPBEb00XUcPBEbt5YzjoPbtdmnnYevPrAK8sRbUh0yotd92:1PBEb0YPBEbtOzjibtdmnhT78sRbUnoo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1afea183ec546e85c4fe013da29f9bb9_JaffaCakes118
Files
-
1afea183ec546e85c4fe013da29f9bb9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 142KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ