Static task
static1
Behavioral task
behavioral1
Sample
a1e3c0619ad008da698768d56e36b9dd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a1e3c0619ad008da698768d56e36b9dd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a1e3c0619ad008da698768d56e36b9dd_JaffaCakes118
-
Size
196KB
-
MD5
a1e3c0619ad008da698768d56e36b9dd
-
SHA1
876036ac46596a3db71278afd81f896768b3de6e
-
SHA256
d9f78a0a02665c0f4066c22ec024fc51ee270e21b75203052c93a2b61503326f
-
SHA512
71a27a7dcd59e74a90d42c2582abcef362dd27c227ece08cd1e3f2cca08e9b47440b1db00a9e7cc39df0044d90836fbc2d3841e3389ca04a322e50329928d2d1
-
SSDEEP
1536:wTIBarwU9rx4xy+UYsHC6VaS8O20F2IDSDZTJBZLn9Z9NSL8DuNZacU:RBarLKxzcHfVAZYSDN/ZlML8DuNZac
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1e3c0619ad008da698768d56e36b9dd_JaffaCakes118
Files
-
a1e3c0619ad008da698768d56e36b9dd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.adata Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE