Static task
static1
Behavioral task
behavioral1
Sample
31ae915fc8867f3e3ee3e5453c866204_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
31ae915fc8867f3e3ee3e5453c866204_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
31ae915fc8867f3e3ee3e5453c866204_JaffaCakes118
-
Size
5KB
-
MD5
31ae915fc8867f3e3ee3e5453c866204
-
SHA1
7e45f09752aae1c907662d4ab2dd2f1a9de29286
-
SHA256
9e0a12de8e87214b34b31eff4c6c2e5a1c4238c722a98580f6cda5168d0726f5
-
SHA512
088b2f72c9b937d15b0c45f76aa5fa92a1abd48fa0da7726cb91bbc11d8fcc09b555ae1987e07b7d8f014d0e5f6259b07f4c7f9a87c66c719190d8cf986714c0
-
SSDEEP
96:AaFZF1sBtpuJFu8ow/DQbnGJdZYnKdn4XcBnJoAAAF4eH:Ac1sNu28JDonG/ZYnsg+JoAAAr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31ae915fc8867f3e3ee3e5453c866204_JaffaCakes118
Files
-
31ae915fc8867f3e3ee3e5453c866204_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 793B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 818B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 232B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ