Static task
static1
Behavioral task
behavioral1
Sample
a1fce15b3cb7883474868b7816be830b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a1fce15b3cb7883474868b7816be830b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a1fce15b3cb7883474868b7816be830b_JaffaCakes118
-
Size
214KB
-
MD5
a1fce15b3cb7883474868b7816be830b
-
SHA1
83b97c8d08073d7b71a3486e819fe2c92dad597e
-
SHA256
eaa224c1c1cbc6ef096c07b700460fcf49a802962a39c9c61620f6ca5a35139f
-
SHA512
2226b4b8f201e8d9d10c662558c9f0d47e3bdab47b9a05d176c9a07f06f4fefec065e1572b08230e0c3d836cb2338e766af03d92fedbfb36783e4e31952534bd
-
SSDEEP
6144:8oCYRhDISyLzZ8wFchxEndqM1eolw24fNUEB7:oYcS8zDCx4h1eT24b7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1fce15b3cb7883474868b7816be830b_JaffaCakes118
Files
-
a1fce15b3cb7883474868b7816be830b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 97KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 21KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 11KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE