Static task
static1
Behavioral task
behavioral1
Sample
a516384d2cfc30d25e5c38bbdd64dab6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a516384d2cfc30d25e5c38bbdd64dab6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a516384d2cfc30d25e5c38bbdd64dab6_JaffaCakes118
-
Size
37KB
-
MD5
a516384d2cfc30d25e5c38bbdd64dab6
-
SHA1
e496200506e4e76ddffa871005b3dbf6533a1b46
-
SHA256
682766297f5433da07dc1ea4fedc22374ffed16c5ac0452433ffa1be756af46c
-
SHA512
cedb451067aed63aed3b57da40c9e9ff7b6a9c88d792a071abe9e0e50e44b33cd37ae16fc3e9cb9eeafb0b55d5b1d5068c7477acb3a37ac097fca57a5cebff36
-
SSDEEP
768:5AML0ZGqni7SwwZtYYLvhVrlJuUZB9FxPz98JxUoe8M1uzwNAzcuCI:5BYTi7uZ6YL5VrTuI9eJev1ujc/I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a516384d2cfc30d25e5c38bbdd64dab6_JaffaCakes118
Files
-
a516384d2cfc30d25e5c38bbdd64dab6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE