Static task
static1
Behavioral task
behavioral1
Sample
a01e2b8a1b92bb7db640f7a5db5b7dc7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a01e2b8a1b92bb7db640f7a5db5b7dc7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a01e2b8a1b92bb7db640f7a5db5b7dc7_JaffaCakes118
-
Size
214KB
-
MD5
a01e2b8a1b92bb7db640f7a5db5b7dc7
-
SHA1
32ac9be20645eca74136e2f893b45b6e565a3989
-
SHA256
e44e1af58a41fff99156cf6449234df0ff62fe2aaf03046f9cabbbba1f5ecd43
-
SHA512
757f06ca72573b8e6b28148e8376047b3a681b5206df8ee5766f68c093be6ca0b0e73cf115d323b2799c261ced3a0873c42242534b3148727d28a8018dada16c
-
SSDEEP
3072:xqVHYJ/SmRcK2/N/Ny1bGY4FtfffPa2fzchpaed3YGyun6LlV60PFeytXrj:xqxYJKZKsFy1bGYSfrMd3YZV6UtP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a01e2b8a1b92bb7db640f7a5db5b7dc7_JaffaCakes118
Files
-
a01e2b8a1b92bb7db640f7a5db5b7dc7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.packed Size: 512B - Virtual size: 432KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 179KB - Virtual size: 195KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE