Static task
static1
Behavioral task
behavioral1
Sample
a24e356033690ac1578e2ff9870a1eff_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a24e356033690ac1578e2ff9870a1eff_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a24e356033690ac1578e2ff9870a1eff_JaffaCakes118
-
Size
130KB
-
MD5
a24e356033690ac1578e2ff9870a1eff
-
SHA1
0f1869d6c30347a0ad0c518bd0728ebea21b1034
-
SHA256
503bdb5b3540a5dbe8882b11dae25cf04320ee62c814787a3a4a4275ebffab5e
-
SHA512
fdaf1b8e31a83117ffb3ffee2073e9a23193fc2e4ef85b60406b9a66e0f75610b6f321d52e49b572e9952e154de04e7f4a4912b95292f7f528e8e016a63552a9
-
SSDEEP
3072:IASpPRg/Ufb+amSwfS67seY8h+nuT/5pLLBBBfW+bpZOsRLH3:uPSADm/kPuT5p5B7pZOMz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a24e356033690ac1578e2ff9870a1eff_JaffaCakes118
Files
-
a24e356033690ac1578e2ff9870a1eff_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�PX0 Size: 9.0MB - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�PX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.A.Vi.RA Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.F.U.C.K Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE