Static task
static1
Behavioral task
behavioral1
Sample
a1a5d4d6341698ceb270db8450f36a68_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a1a5d4d6341698ceb270db8450f36a68_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a1a5d4d6341698ceb270db8450f36a68_JaffaCakes118
-
Size
158KB
-
MD5
a1a5d4d6341698ceb270db8450f36a68
-
SHA1
92c86b7e567e965ed0aad704b63308bd227e2d46
-
SHA256
14d2d24c9a55263fb7a1d50b6dcd2d0b10ca24a799943bec1a6b7a6d2155dda4
-
SHA512
d08d6bd550aa59a1e82de8de708961d146ce19bfe38a58c4ac683c1c4ea1f5ea13ff84ec2c8cd99e1ce4e3a38dc0618ea143f5484e5fa6932f304fa7da2ef690
-
SSDEEP
3072:I9LTiWzlcswT/hkF/z76D2789kCkiN+iFYxG4PLxYFRYHEujUwBVcmrRSefQto:+LTiWzlZkGzkrmliN+ywG4PLcCE3mt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1a5d4d6341698ceb270db8450f36a68_JaffaCakes118
Files
-
a1a5d4d6341698ceb270db8450f36a68_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 129KB - Virtual size: 4.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ebut Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE