Static task
static1
Behavioral task
behavioral1
Sample
a401baeee316d51f3bcf0517eed3e536_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a401baeee316d51f3bcf0517eed3e536_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a401baeee316d51f3bcf0517eed3e536_JaffaCakes118
-
Size
40KB
-
MD5
a401baeee316d51f3bcf0517eed3e536
-
SHA1
571741ae0c78909d976e06b12cefd7de1d994b5d
-
SHA256
85555d32fe7ce354b5351979592a98468f11ab3e7187c877f9defd54b3b095b8
-
SHA512
5eddb36f558ca105589bd9f20f1683d0f412fb39832f25e23342a2d87cf2f868311a4fe8a148585055000138a88c7a560f53d7df8eb2cb09d49ff1897836f32b
-
SSDEEP
768:NhKV424gRB/fs87+nmQ3ydx7cqbnY+zIXX+W8Ub8gI1NV96Jg0goq:NhKVT4gRls8KmQ3wbnpUbuf6Jooq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a401baeee316d51f3bcf0517eed3e536_JaffaCakes118
Files
-
a401baeee316d51f3bcf0517eed3e536_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: - Virtual size: 24KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE