Static task
static1
Behavioral task
behavioral1
Sample
a8803132f14cc821c047e4c3361cbdd6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a8803132f14cc821c047e4c3361cbdd6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a8803132f14cc821c047e4c3361cbdd6_JaffaCakes118
-
Size
21KB
-
MD5
a8803132f14cc821c047e4c3361cbdd6
-
SHA1
be1d4f26d6db0691d0665b6e9e9ce1c0c6ea54be
-
SHA256
8286e445a635f375ca1fd9fbf5c977fbf53ddf306969f02a1c792446ee2b5391
-
SHA512
6ca98e507d394b12e3b3b8668e9cf63674011767000dd98add56eecec2dc3da0377e73f3b007e39cf82d2ab103f2de965c2d402624c9104025e73a6c01e71397
-
SSDEEP
384:CyJRdCyDzMqlWiDmQiQdbAA/mlYEvLjWHmCUeU0zBAzgWtT:CACysqlZDmQPTmuUn8SeU0zu/t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8803132f14cc821c047e4c3361cbdd6_JaffaCakes118
Files
-
a8803132f14cc821c047e4c3361cbdd6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ