Static task
static1
Behavioral task
behavioral1
Sample
a56073e61c94353a8e74742d558aa7f8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a56073e61c94353a8e74742d558aa7f8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a56073e61c94353a8e74742d558aa7f8_JaffaCakes118
-
Size
164KB
-
MD5
a56073e61c94353a8e74742d558aa7f8
-
SHA1
d857c8a65b856dbf0a786eb1a447d4ba41d041f2
-
SHA256
f2b8071b027dff6583c78c67b2a7b9020dce60539efcb57f584c21dc009f1545
-
SHA512
b45fbdbfd40599091a0b6d12acdee4d3f96e7a14cbc40c55cf0a2d76cef81e48b7bb2e223e8c6b195993c6a8a688129c6f4c3489f49d3cfe02daa4ae250c2388
-
SSDEEP
3072:uQViVgH/SR9bfW66HkIWtBrYAmH65A5rScS9cPaTHw:uQknbyHverYAmHGuWiM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a56073e61c94353a8e74742d558aa7f8_JaffaCakes118
Files
-
a56073e61c94353a8e74742d558aa7f8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Tron Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ