Static task
static1
Behavioral task
behavioral1
Sample
a220dc9a0ddb9075badb7172a11073e5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a220dc9a0ddb9075badb7172a11073e5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a220dc9a0ddb9075badb7172a11073e5_JaffaCakes118
-
Size
229KB
-
MD5
a220dc9a0ddb9075badb7172a11073e5
-
SHA1
d6435a33092153fc1b6f125a56341749d8141f32
-
SHA256
5a7ee613258251f79c520dee63252750456391db8abb40a94ea9e4f3c9f19cf7
-
SHA512
972f66648f0148f21234a893516edd0a64383407835c7c5556d2b92b81d76eaba26c296659df8c197b9c799610bb9e8bfeab81ff2d94e95229499315df308c6f
-
SSDEEP
6144:GEE0XGs4uUfzcgDMbOj7+X1NDPZRX8bTEYPatSO6:NKvNo4jaXvPZRXyTdPatZ6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a220dc9a0ddb9075badb7172a11073e5_JaffaCakes118
Files
-
a220dc9a0ddb9075badb7172a11073e5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.heb Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE