Static task
static1
Behavioral task
behavioral1
Sample
a897b2e406548bc4f3df36bb578b4da5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a897b2e406548bc4f3df36bb578b4da5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a897b2e406548bc4f3df36bb578b4da5_JaffaCakes118
-
Size
396KB
-
MD5
a897b2e406548bc4f3df36bb578b4da5
-
SHA1
87048ac605f8c4129ffdc752368cc9dd0a921ea4
-
SHA256
da6cdf958bd94655bfa3bd20eb47032a8533de33d6e3508bf2dc4b177f134e88
-
SHA512
32c3a59ee266f3eacbaa02a3d41b251c337b1535796fc67b329b097de0cc6edcd7f93d41f2902fbca4c90791a08f6f69786237e6cfc75fd6030ebcd462327d02
-
SSDEEP
12288:MnYlQ66SxgyE6b7MP+Dd2x8s6f6b7MP+Dd2PL+:MnYll6igK7MP+h2L6G7MP+h2PL+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a897b2e406548bc4f3df36bb578b4da5_JaffaCakes118
Files
-
a897b2e406548bc4f3df36bb578b4da5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 51KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 223KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 109KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE