Static task
static1
Behavioral task
behavioral1
Sample
a2ab6dcae1d06bc7d976b87fecb276bc_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a2ab6dcae1d06bc7d976b87fecb276bc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a2ab6dcae1d06bc7d976b87fecb276bc_JaffaCakes118
-
Size
1.2MB
-
MD5
a2ab6dcae1d06bc7d976b87fecb276bc
-
SHA1
4c07f5f6d5ee8dab63b18ba8bfab77aedf9d8774
-
SHA256
1cf7bfded3539fb5ffc3546655356ce74bfed7c14fbf58483703dc9ac0a5e5e1
-
SHA512
d0d84660a2a8e78ddf376d682ea5d748a9300709066a438aab411eeaf572469ffb2cc0c16edf6e8036baf90d15b28240fc5555c18ae28ce72e70601c6d802bd1
-
SSDEEP
12288:rF6a8WSqHMU12wTCztTb1RdtEBjN+jHEzbDyEZa+rUlynwMEcJGitj/i6m7oa5g:rcfWjz2wTCB/JtuN8kzHM2zN5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2ab6dcae1d06bc7d976b87fecb276bc_JaffaCakes118
Files
-
a2ab6dcae1d06bc7d976b87fecb276bc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 695KB - Virtual size: 694KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 452KB - Virtual size: 452KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ