Static task
static1
Behavioral task
behavioral1
Sample
a85400a4a64c06e0c135721b338f6704_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a85400a4a64c06e0c135721b338f6704_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a85400a4a64c06e0c135721b338f6704_JaffaCakes118
-
Size
266KB
-
MD5
a85400a4a64c06e0c135721b338f6704
-
SHA1
8842b89bc6ca1a716cdaf1d016890e3a17aed24f
-
SHA256
802bd7e9f0b1bc03b82988609c0c92f192a66871f5d3ecf38e4294c9084ded3c
-
SHA512
0403dd433c07e9b868332fe9643434f15aa3171a0115c8deb52613e072b27ce8f78ec828a1161eb6e290518fd3efbfc4f868303fa3f4360f1818dc65994d8c01
-
SSDEEP
6144:NwzW98/WMP5NEENBAQx9pyp6gLMjnk5R0mc769/cD:NwzW+eO8IWsIymc769kD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a85400a4a64c06e0c135721b338f6704_JaffaCakes118
Files
-
a85400a4a64c06e0c135721b338f6704_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 122KB - Virtual size: 524KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE