Static task
static1
Behavioral task
behavioral1
Sample
a502a676a67921c6cd7c531fbbacf53f_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a502a676a67921c6cd7c531fbbacf53f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a502a676a67921c6cd7c531fbbacf53f_JaffaCakes118
-
Size
395KB
-
MD5
a502a676a67921c6cd7c531fbbacf53f
-
SHA1
4c9fda1485fe5532c6b832ca6c4155b626bf194a
-
SHA256
2a4370be4929cd2877c68c2fc07d130b515734c6d1a62aab04f436cd6cc56b67
-
SHA512
b667c0dd401e13b4aab1e4c24169fecc8b0d298ee2dfa661b8b4e2d3978e09df0b4a8833863af9bfd0e60e0893cfb022697ffc9f62ba643aa51190864e87102d
-
SSDEEP
6144:4DqMo5RpTDF2idZecnl20lHRxp3g/hNtCA0wlObInsvQPtIMBvo:W0lF3Z4mxxWhy/LhYPRw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a502a676a67921c6cd7c531fbbacf53f_JaffaCakes118
Files
-
a502a676a67921c6cd7c531fbbacf53f_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 79KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 312KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE