Static task
static1
Behavioral task
behavioral1
Sample
a22a8f62068b4c9594ee3d95827e699c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a22a8f62068b4c9594ee3d95827e699c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a22a8f62068b4c9594ee3d95827e699c_JaffaCakes118
-
Size
141KB
-
MD5
a22a8f62068b4c9594ee3d95827e699c
-
SHA1
71e169f19d7ccd21c3b87ff6f65facadf6a904b5
-
SHA256
83010d2a9631c6b5733ab25219f65fad221d2a21f9a28d8f7a64848c02e3c918
-
SHA512
63e12c070681d9e6d0a1d27e10dadeb217fe94d1090931c996f95bc5bfa75780ec20b223d72c5a9d47dfc2d2bbfba28559437f719b4a1d7ed97a213ed6f369c1
-
SSDEEP
3072:sK4nDbfagCqKZk5yY/4npqR+mr3iduCQVWrBd4gNOOyS3TqkL3ijV:P4nDWgRAkPqpe+mr4SWjbO0LriR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a22a8f62068b4c9594ee3d95827e699c_JaffaCakes118
Files
-
a22a8f62068b4c9594ee3d95827e699c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 156B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ