Static task
static1
Behavioral task
behavioral1
Sample
894a90b450a0ae0061b56c35aa674d77_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
894a90b450a0ae0061b56c35aa674d77_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
894a90b450a0ae0061b56c35aa674d77_JaffaCakes118
-
Size
1.5MB
-
MD5
894a90b450a0ae0061b56c35aa674d77
-
SHA1
67d9a07fc8ae547be2274c9f4720f381f4db9b53
-
SHA256
3f883f629722d1df35771f7b8f1b4a6f15ea6abcb8fdde4c4d80f4bb09cbf100
-
SHA512
81a262a17c30c86af17c3ba48a9c4c06ddf7d9c24ce9d5d47d5280438fd472238a4cdc094d16db78ef0f80c4772b59e9adb2c0031c1d92df061496339167df59
-
SSDEEP
24576:bZdE9ydMKNXcg3ZYnoffB7mNVnZiJO+hsWZrjOcbeXo2LPStx+pFur4/2HWPBEgY:84XX3Sap7mN+CodoEx+pFeOXZ83
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 894a90b450a0ae0061b56c35aa674d77_JaffaCakes118
Files
-
894a90b450a0ae0061b56c35aa674d77_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 177KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Aspr Size: 1.3MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE