Static task
static1
Behavioral task
behavioral1
Sample
a0625ad1a97b92781120b89a33c0a8f9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a0625ad1a97b92781120b89a33c0a8f9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a0625ad1a97b92781120b89a33c0a8f9_JaffaCakes118
-
Size
103KB
-
MD5
a0625ad1a97b92781120b89a33c0a8f9
-
SHA1
fb95896b99f541dcc0bd7bd44a1e7acbb55882fc
-
SHA256
695bfe6e6881d035e951ed92e5231d223d3778d71e29c3edb010113fe0a7618d
-
SHA512
4c7541a06a9079d88a626e3c7038376c80b4b6dedec58c658d71550a1615235cf7db735903cb0ae1a1695ad284100a6f70c037010c0be6a6e7539535f0edac6f
-
SSDEEP
1536:au0VNp6oaJo0N4s/5bFZslNDyZVHsOLKcNetBP1ib2h6w7NV5Sxoywf2oPlJ4lIH:aKvvRZsCHsOtqPj4oRf2iPrT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0625ad1a97b92781120b89a33c0a8f9_JaffaCakes118
Files
-
a0625ad1a97b92781120b89a33c0a8f9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE