Static task
static1
Behavioral task
behavioral1
Sample
a11b168e4cc789cd477fe0b92025821b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a11b168e4cc789cd477fe0b92025821b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a11b168e4cc789cd477fe0b92025821b_JaffaCakes118
-
Size
184KB
-
MD5
a11b168e4cc789cd477fe0b92025821b
-
SHA1
3e08dca7949b7f5e0a3074b688b650a23f35ef89
-
SHA256
2a958771832ee0445446c292425d471b92df9ca93b30cb10cb75852941bbd000
-
SHA512
906bed4cddc7d0502d93206433a661b31c501f1071e7c2a4467abf0478a4b260ac9ccb789934068323ab3d97f5c37058ac3b9fcd507ef21e958a2952bf587bc7
-
SSDEEP
3072:2j6XaLI+TPS1CJvcYUmL7LSdc7LwRWGXMCsrh5FgPdzNWl2n03mNq0t7:2j6NMPECOmmdc7MAbh5F2d0E2mN3F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a11b168e4cc789cd477fe0b92025821b_JaffaCakes118
Files
-
a11b168e4cc789cd477fe0b92025821b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tqn Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE