Static task
static1
Behavioral task
behavioral1
Sample
a1fa8f6078785818c8b591f8edc5c07b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a1fa8f6078785818c8b591f8edc5c07b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a1fa8f6078785818c8b591f8edc5c07b_JaffaCakes118
-
Size
1.2MB
-
MD5
a1fa8f6078785818c8b591f8edc5c07b
-
SHA1
1ad1aaac527533e828bb9911dca28cab715d45ff
-
SHA256
34963d013ea6d12e3ca9e2921c1868144500fbe729249cf12eba710de205e7da
-
SHA512
ce9c47f06ebec56e693528324919013f76d8eb3768d16144bbb70eed2bb2533e3b05ad9c12ebc21cfe40121a421f3b27226c7153aa3556d259da7315a91ad9f4
-
SSDEEP
24576:/K1XNXpDh79l/BmwBBY79rx035HTiJ7yG21WvrWRy88gtPMscOhLNCe:/idXcwBBIx0NiJ7yB0Sv8WKMLNCe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1fa8f6078785818c8b591f8edc5c07b_JaffaCakes118
Files
-
a1fa8f6078785818c8b591f8edc5c07b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 80KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 1.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE