Static task
static1
Behavioral task
behavioral1
Sample
a0fa8da40c0862f8a857ec9e85027563_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a0fa8da40c0862f8a857ec9e85027563_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a0fa8da40c0862f8a857ec9e85027563_JaffaCakes118
-
Size
92KB
-
MD5
a0fa8da40c0862f8a857ec9e85027563
-
SHA1
9ba0b50d2238e1d5880abb94ae297846e894412b
-
SHA256
af2dc30a9e4ccecc70b9ff7ca3f005aa8c83b1bf5d651d4f5b23e388156ae054
-
SHA512
06423b84f90b28410d2b5b1e5229b281183681f5148d4bc8655a77506d63b3fcc1ee5e344a17fa340113ca13b559f796406fa1fb37de15cd7c15e94390242af1
-
SSDEEP
1536:Jt2MH5b55A4lcB3jwzZnT/h+eUyyyE4Tr/pP3EFBMnvX1g9C00l9:aMl7s3+LwwXx0FW/1Zzl9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0fa8da40c0862f8a857ec9e85027563_JaffaCakes118
Files
-
a0fa8da40c0862f8a857ec9e85027563_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.itppp1 Size: 640B - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c$bc6x Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reh4bx Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bd899x Size: - Virtual size: 100B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 81KB - Virtual size: 84KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE