Static task
static1
Behavioral task
behavioral1
Sample
a8a50ff534e6d263113387f1d932941d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a8a50ff534e6d263113387f1d932941d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a8a50ff534e6d263113387f1d932941d_JaffaCakes118
-
Size
150KB
-
MD5
a8a50ff534e6d263113387f1d932941d
-
SHA1
3314a9587749892a6afd05d595906188ba7d2202
-
SHA256
09210a3be79eb05fdf6bfda78067f42a9005ca4658691211fba761cbaa21eb6f
-
SHA512
0cdedab8a3211031421dc7228e124d4414be71544c700f9e7a98c46f202cef59260570cef55b99317ab9dd82200355053a1357f4b0dbc3b5fda2b1e7ae75284f
-
SSDEEP
3072:/nk9NlQ90ZqEruCiJSG1W9yecJd8QrQwPoYZN:/k9Nl008CniB1Sy4IX/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8a50ff534e6d263113387f1d932941d_JaffaCakes118
Files
-
a8a50ff534e6d263113387f1d932941d_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 87KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ficken Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE