Static task
static1
Behavioral task
behavioral1
Sample
a3907d292a7963316b7af9959dd8b0d7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a3907d292a7963316b7af9959dd8b0d7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a3907d292a7963316b7af9959dd8b0d7_JaffaCakes118
-
Size
86KB
-
MD5
a3907d292a7963316b7af9959dd8b0d7
-
SHA1
eb37b0ab48dc6a16e522efd08aa2f81b8aa1ec32
-
SHA256
0614a3438f27957e29cdb9562c0a6db5fd8a5442f3b865e361304fc5c04e3eb2
-
SHA512
8d6d18b5e00e9de9fd1daeb1547a77931d9019e6a2c5d53e4c43eb727ec0c1ac566e008e87ad8ee84ca8bbd6402d3086311ec6e6720487f2804843e930c73cd6
-
SSDEEP
1536:t4VVHJZBk7HofJ4NRQNujnpaFtNGsEGkQSLvEAu4NooO9ALz3RN:tQJLBkjoKDnpabNGsxSLv9JNW9ALv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3907d292a7963316b7af9959dd8b0d7_JaffaCakes118
Files
-
a3907d292a7963316b7af9959dd8b0d7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
q Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8 Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4m Size: 4KB - Virtual size: 886B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE