Static task
static1
Behavioral task
behavioral1
Sample
a8a649445a9d7a06712a1da2285aa5e5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a8a649445a9d7a06712a1da2285aa5e5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a8a649445a9d7a06712a1da2285aa5e5_JaffaCakes118
-
Size
114KB
-
MD5
a8a649445a9d7a06712a1da2285aa5e5
-
SHA1
d510a07e93f198d5f856c845484ead931a878fdd
-
SHA256
64eb7780bc15dc35fce9a6a5aba9deff61511f175152764c9c92c1821e853f8e
-
SHA512
15e38945ee009260bb51ba552babd99be3cf4aa6d281db8d914adb1857653ce469c4bc7c9a2b4c2f2a28ec46e4543b7d2a72cf2625bf600ca4674f1e96585696
-
SSDEEP
1536:YhyCXT9S1Wm2b5jrywJb8UYaEJfx+qsRvw4BlCc3MvWYbbBTSxPReJhUEHNYackY:1CDIWm2b5SwgayQVR4olnoW6u5RQ0dOC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8a649445a9d7a06712a1da2285aa5e5_JaffaCakes118
Files
-
a8a649445a9d7a06712a1da2285aa5e5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 188KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 110KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE