Static task
static1
Behavioral task
behavioral1
Sample
a50c40691998c1582126f274ae1fcde0_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a50c40691998c1582126f274ae1fcde0_JaffaCakes118
-
Size
28KB
-
MD5
a50c40691998c1582126f274ae1fcde0
-
SHA1
4efde3f6bf00d84e39f69942cd5f0d28e29dd549
-
SHA256
ab56f899fdd00e1e02f2279278eb794553f129c6805f3a25b5186d338c86a0aa
-
SHA512
69f0359cb297647e3107fd467109c1c31df12b95709bc4a0fd8f429d328e52d09f2e5c8159bd029c9431b8a3e46fe97070b01688094148026ad35ee41ad93b31
-
SSDEEP
384:6csUCnxW9JA6i+EEFYRH/FNe7S6v4gLXEuQjesUV7BjrYatmOeVMiXbFAdrV5Tuc:6rUtDzYdmS6V8nUV7Br5totbuFTu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a50c40691998c1582126f274ae1fcde0_JaffaCakes118
Files
-
a50c40691998c1582126f274ae1fcde0_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
TWSL Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VWCT Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VGVU Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE