Static task
static1
Behavioral task
behavioral1
Sample
a0571ba6b300491cc2a8702437820b5a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a0571ba6b300491cc2a8702437820b5a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a0571ba6b300491cc2a8702437820b5a_JaffaCakes118
-
Size
24KB
-
MD5
a0571ba6b300491cc2a8702437820b5a
-
SHA1
3966cbe12c055cdab85a8131e007f4c81a2c2c10
-
SHA256
2d189b86f0ed82788d637ce14e35cf9f4c1d1b1b0c7514b972d370bc40226943
-
SHA512
0e7fdaeb922b5b00c029f5a99a0b7e8a6aee703ac6ab1703bba2d17a806b2752aeef17cb97424b0088b14fedd10595a9ddcd1a7d24d27cd9f1c287df99489d15
-
SSDEEP
384:6wAOYrOAethDCJbsPAqWB+GkDIRzL+jW9xau4BC6qfnzcOeN4JKgQrgRYlmw:63OkDethDCJaAl+RM/+jwEdOeNLkRgmw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0571ba6b300491cc2a8702437820b5a_JaffaCakes118
Files
-
a0571ba6b300491cc2a8702437820b5a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.INIT Size: 114KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ