Static task
static1
Behavioral task
behavioral1
Sample
a0a0e9160cedd0d9ef1586105ab18ecf_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a0a0e9160cedd0d9ef1586105ab18ecf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a0a0e9160cedd0d9ef1586105ab18ecf_JaffaCakes118
-
Size
129KB
-
MD5
a0a0e9160cedd0d9ef1586105ab18ecf
-
SHA1
d772b0c707270abec26a823d072b7d9c29159bc8
-
SHA256
71afcf3cacce138ee726f71de13ae6f7211f5f8b458cebdeda501241a2e8cdfb
-
SHA512
73f9eb8d4b813ec1fb928216477564b1849872eeeb34681cd13ab23fb36b8b81c8d7a0f289c540b572240a55296992fa06837d92a5b11dbe01964d04edb72aa8
-
SSDEEP
3072:ua/xzd5N3dhvn3FmugZwmYHGO3PQg1fapIKVV89mIxEF+rp:xfNhv1mugzYHy6apIKz89m4Eip
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0a0e9160cedd0d9ef1586105ab18ecf_JaffaCakes118
Files
-
a0a0e9160cedd0d9ef1586105ab18ecf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
dc Size: - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
29ogxgh Size: 124KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
avgyg Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE