Static task
static1
Behavioral task
behavioral1
Sample
a2168f59d1ab94c7d8ca6004f0df824b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a2168f59d1ab94c7d8ca6004f0df824b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a2168f59d1ab94c7d8ca6004f0df824b_JaffaCakes118
-
Size
14KB
-
MD5
a2168f59d1ab94c7d8ca6004f0df824b
-
SHA1
94a5e3b808755ce17b26bdc58b0b85c622aa3856
-
SHA256
0760a7eca0a8841294cc2a23d01b41665c17c6de5a679a26e1d978679b1ecabe
-
SHA512
442ba02f75f98e5c3f731b4750fe52c27df7d850e143dae2de111e7e8fe03a4d7134ed5fafd62d7aa9d5d2a5fc30950bf1fba763d8ec08f3a424757fac33659e
-
SSDEEP
192:yDyCVHKCBrDZcLv2kcCM89ivcRjyLVoqmyD9AEqEvlh09hGDH8rsGq7MmfXMH:yukHKqrDZwviCDMCyyEDkWDJJ7M2cH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2168f59d1ab94c7d8ca6004f0df824b_JaffaCakes118
Files
-
a2168f59d1ab94c7d8ca6004f0df824b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE