Static task
static1
Behavioral task
behavioral1
Sample
a007d85481d3ebc4bee6dfc7d986b4cc_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a007d85481d3ebc4bee6dfc7d986b4cc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a007d85481d3ebc4bee6dfc7d986b4cc_JaffaCakes118
-
Size
36KB
-
MD5
a007d85481d3ebc4bee6dfc7d986b4cc
-
SHA1
0bdc5db19634e97584eebd4a72c1b4a922476c63
-
SHA256
19875fe717e9ae9d1424b37e9946a64f4bdda9ed8f7fadf7ab4350723ac38da7
-
SHA512
c7e2b49bb7e2afe2dd181f3a5f54ef8d85297e63c1760af3bad7fa1cc588796bbc179ccaa265c006294d1feeca271983b96d136502f6f1bec4675c44e8ac244e
-
SSDEEP
384:baw5JkD2ShyRQtcZrKp3Ei0KnbQBU/Yaz1cNHKFJicyVcF0JwVcWY6o2YfvtWVO1:p5qh6QtUoqyQBiJcQ9yVcF7V86ouYRz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a007d85481d3ebc4bee6dfc7d986b4cc_JaffaCakes118
Files
-
a007d85481d3ebc4bee6dfc7d986b4cc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
�������� Size: 20KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�������� Size: 3B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�������� Size: 13KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�������� Size: 9B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE