Static task
static1
Behavioral task
behavioral1
Sample
2256a9b4e3f58d47ccd5174010131049_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2256a9b4e3f58d47ccd5174010131049_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2256a9b4e3f58d47ccd5174010131049_JaffaCakes118
-
Size
10KB
-
MD5
2256a9b4e3f58d47ccd5174010131049
-
SHA1
304f5d6602ddd2706028a9be7a8121c6b89a2c23
-
SHA256
58421f83c335ae21c5360136ec33bf47b50e5c607d2b1309097b10b32cc1f6ec
-
SHA512
eceb07896767d3580652d335a4fbb611d53a5d92710c4a7838ba97a608d08661e5eed9d14df276087b7a72940e4fad4a6bf61110b9f481e12318d74a6aedc6cd
-
SSDEEP
192:+aUhk2H7gzbGHxFLf+QuEyNtHaCvAWdDOK476BvYdb5j:+H8zqHxFLGx7HqYaK1YdNj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2256a9b4e3f58d47ccd5174010131049_JaffaCakes118
Files
-
2256a9b4e3f58d47ccd5174010131049_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 972B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 120B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE