Static task
static1
Behavioral task
behavioral1
Sample
a3294c639036d7b0cf47ca70550af6be_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a3294c639036d7b0cf47ca70550af6be_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a3294c639036d7b0cf47ca70550af6be_JaffaCakes118
-
Size
944KB
-
MD5
a3294c639036d7b0cf47ca70550af6be
-
SHA1
14e5c1b4c2f90a3d77a310e1597f58cb77f16131
-
SHA256
ff30fc3c933238c988432c98fe81a73d00946064601a5a0705809bb7702b38b2
-
SHA512
73898ad3a5a0ee87945210841bd5b38d9af75858231c60b2fc0307eb27c554709d1184c9f953ccc20bc7015ca8b745be5e609d0747d6a41be3fe50a2b8dce583
-
SSDEEP
24576:UPoBeYheHk1OX3avsWhaSkqkW1UE1qRyWr65GxYOY6a:UKbeHxa0iaScWZ1qRyy+GxYB6a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3294c639036d7b0cf47ca70550af6be_JaffaCakes118
Files
-
a3294c639036d7b0cf47ca70550af6be_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 927KB - Virtual size: 928KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE