Static task
static1
Behavioral task
behavioral1
Sample
a310c925e1351b80db0d6b4d85a7ae47_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a310c925e1351b80db0d6b4d85a7ae47_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a310c925e1351b80db0d6b4d85a7ae47_JaffaCakes118
-
Size
40KB
-
MD5
a310c925e1351b80db0d6b4d85a7ae47
-
SHA1
85b3c219282ad0bf76e65d7c54bc50d2ba2d0aa1
-
SHA256
e5f719de3216439b58a20f1dc26162ee1909a46728b541cda647a778d74191da
-
SHA512
cd3458f3595d78a3f5877cb9ef92ea3e7996d5d46fbd158921dc4e74de788a167cb38fb962dbe48a3d63b23b87d459f98a4e590cb579820426cde94c41ee67ab
-
SSDEEP
768:HWPzwSPgl5hpJAQE58WV8ASgjBaEqQOOe8D8ePZceCd1Z8dJF:2LgPhpJAQE57SAPjwEqkxRoZqF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a310c925e1351b80db0d6b4d85a7ae47_JaffaCakes118
Files
-
a310c925e1351b80db0d6b4d85a7ae47_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 143KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ