Static task
static1
Behavioral task
behavioral1
Sample
a33a8bfd40eff478028f7395de0f0c26_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a33a8bfd40eff478028f7395de0f0c26_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a33a8bfd40eff478028f7395de0f0c26_JaffaCakes118
-
Size
136KB
-
MD5
a33a8bfd40eff478028f7395de0f0c26
-
SHA1
7604a73b1af8c19a8fca6770bbe15b9f8a541392
-
SHA256
3cc8bba7b0abfa5ee586c8fbc2ce92e055e5cb9c15f7052442dbc56b8585bc51
-
SHA512
691c805c9c0db8348553f6af2c82b4e01f2a3a50e6074cff95dcb7bb662e741decb0893326c5ba2b77ad23b3fbf24d28d05da36e4757bbbc4ab6c4920afbf44e
-
SSDEEP
3072:ba0ZCwfF+9/QU7L5eeTxrsTv3XSFnunFnFr3W:bZZCwfF+5LMQkvnSIZR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a33a8bfd40eff478028f7395de0f0c26_JaffaCakes118
Files
-
a33a8bfd40eff478028f7395de0f0c26_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE