Static task
static1
Behavioral task
behavioral1
Sample
a11c26d01e9d0803ae7442520dd52991_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a11c26d01e9d0803ae7442520dd52991_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a11c26d01e9d0803ae7442520dd52991_JaffaCakes118
-
Size
630KB
-
MD5
a11c26d01e9d0803ae7442520dd52991
-
SHA1
d30c2736e2f22b4632cf1b1d51bd2b3ec7562ef2
-
SHA256
d9ee2bd202d799a567eeb799fd34ab63bcac73fd9b9b66fb462acbfc0f414179
-
SHA512
7a9be3953e48a8b0aaffd6f8c7899560538bc6d096c7ca73dd6ed1442edf54262e96e006b1609eaf7e95ce2d073933dda1511f1c61afb371d1eb4534ea4b2d02
-
SSDEEP
12288:bxPIOJrFdPHqU0YzR0RfDuQ7oBVno94BfPr4LWOF3Z4mxxuOYtoQibRfGwPGONAG:b9IYrnPKU0EQ7oE9SMnQmXu1AbPbAG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a11c26d01e9d0803ae7442520dd52991_JaffaCakes118
Files
-
a11c26d01e9d0803ae7442520dd52991_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 262KB - Virtual size: 648KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 339KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE