Static task
static1
Behavioral task
behavioral1
Sample
a0e4192174f1c27cb1e543e20cf99b6f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a0e4192174f1c27cb1e543e20cf99b6f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a0e4192174f1c27cb1e543e20cf99b6f_JaffaCakes118
-
Size
3.8MB
-
MD5
a0e4192174f1c27cb1e543e20cf99b6f
-
SHA1
747436583ec7582a4579a989642f7446cfc51eeb
-
SHA256
a74ba750b8e6a73f4f2091955d6e0226862f9e55a2d462bf4d0c1641b4d59230
-
SHA512
2481209c0214bebc36220abce8882258379cb8d55f789487ff3ed633435d961b486fdb671636e697e59c4561bbf2c3c98d1615d14b27a8e4bc0e01f454e90260
-
SSDEEP
98304:/nDImHi6AOIuIg8Ii5FbZ/sLEvmRqlF/ZlrmNjv/gt:/nDId6BOFz9PraAt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0e4192174f1c27cb1e543e20cf99b6f_JaffaCakes118
Files
-
a0e4192174f1c27cb1e543e20cf99b6f_JaffaCakes118.exe windows:5 windows x86 arch:x86
21970a26720f871a53baa1ee15ed9cf7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32 kernel32
DeleteCriticalSection Ӳ@
Sections
.text Size: 3.2MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 620KB - Virtual size: 620KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ