Static task
static1
Behavioral task
behavioral1
Sample
a539a95c559d54bbf265a2e9205b65a7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a539a95c559d54bbf265a2e9205b65a7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a539a95c559d54bbf265a2e9205b65a7_JaffaCakes118
-
Size
28KB
-
MD5
a539a95c559d54bbf265a2e9205b65a7
-
SHA1
55f3f6fe6206100a31afe1c2449daf1a77cf46cc
-
SHA256
1ff592924f3a7c892ff53dec522a75dd2dd11a8eb9536d33770865135cc43603
-
SHA512
b81328abdeb814de81b7ae6c57365b44ff411e24fe3c5c910f70bde414ba528af15bfa0ecbf98435debb0c87c5beba90552f84470601df29bd9542b19b5f72e6
-
SSDEEP
384:LKQoZ0DQh6IDqdjFCteCXoqJDnxmV0HtU2Gbx3bDl8IFdVtFlO5+qTdKdkA54lc:l3jF2eCX1UKHiZV8IPO5dTdKGflc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a539a95c559d54bbf265a2e9205b65a7_JaffaCakes118
Files
-
a539a95c559d54bbf265a2e9205b65a7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ