Static task
static1
Behavioral task
behavioral1
Sample
a0b857b6fde71fc586f8b9f23fbac517_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a0b857b6fde71fc586f8b9f23fbac517_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a0b857b6fde71fc586f8b9f23fbac517_JaffaCakes118
-
Size
260KB
-
MD5
a0b857b6fde71fc586f8b9f23fbac517
-
SHA1
558cfd7375722ac3e3ee099717846a2d0f526f48
-
SHA256
d646d265f0c2a1c5351f760d216bd4efd0f9b0608455d3b7647dde74b8911777
-
SHA512
3b5699c64ce26015286b6a07f7fbfecbc3f313a286f966d59475c94003747a0be6e955070447b9a7a29daecc9f513ca3afa0ce34a3d2197f88ca5eded15d41b5
-
SSDEEP
1536:GMsK0FZtQoP+CCNvuFahT8IgfUVx9moVuAfjzYQwPPJ5g7bO9V:GFViRuSTKbvA7zYQwPPJ5gXO9V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0b857b6fde71fc586f8b9f23fbac517_JaffaCakes118
Files
-
a0b857b6fde71fc586f8b9f23fbac517_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE