Static task
static1
Behavioral task
behavioral1
Sample
a521cc800933c8b057b40be59a1bb114_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a521cc800933c8b057b40be59a1bb114_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a521cc800933c8b057b40be59a1bb114_JaffaCakes118
-
Size
49KB
-
MD5
a521cc800933c8b057b40be59a1bb114
-
SHA1
6a2bb665f62c89fd0343e71aacb765c3fe2d4104
-
SHA256
e0d5d3907f81af05a6af44c68afe2ba6ac578e184e65dfc2aa4d0fdd6da0d4b9
-
SHA512
b29de872f3813ad7d4c6897d4a81410666d8b07daccf1479c0e8d2215eef412295e1bbfa13e086ad798ad2858a86291370dff8636a2242c785215a129f3e76ca
-
SSDEEP
768:DZ8qC+wnMDs5OFlwWKF9lE8tiy9p0/AoHUUCzeYTS4otit3wRnAXYnQ6:DgvOFlwdjtiko0XzeYIw5IQ6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a521cc800933c8b057b40be59a1bb114_JaffaCakes118
Files
-
a521cc800933c8b057b40be59a1bb114_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ