Static task
static1
Behavioral task
behavioral1
Sample
a380f4c3eb73747134797f3b93f5d1df_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a380f4c3eb73747134797f3b93f5d1df_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a380f4c3eb73747134797f3b93f5d1df_JaffaCakes118
-
Size
168KB
-
MD5
a380f4c3eb73747134797f3b93f5d1df
-
SHA1
dfc1d1515d573bbd6f41a1c6de9e2b6816a06b40
-
SHA256
4537fb2f779e01b4df602a59feff09e52b6bdea618207349049650230b299d73
-
SHA512
09eeb9dbc618dbf2c5a1a0f0558cf4cf6cb15ee5d4ca551effc820eb83df6c6b232a9334bad156d84575de20bf0b414b6523b1b409fe3da5b7cc03811fd68e3e
-
SSDEEP
3072:tiizfogD6du8zlq+JjSFVQCNzE4CfEglODqTPJIIYFLPzDW:thogenT4QSE7MBm+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a380f4c3eb73747134797f3b93f5d1df_JaffaCakes118
Files
-
a380f4c3eb73747134797f3b93f5d1df_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
6VQ20nLg Size: - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qK65nPWP Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
fsTG7yqZ Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zXVzc9SZ Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DcD7sYRy Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
BEzPkB1c Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ