Static task
static1
Behavioral task
behavioral1
Sample
a5645736132b426e8803dcbc90d011fb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a5645736132b426e8803dcbc90d011fb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a5645736132b426e8803dcbc90d011fb_JaffaCakes118
-
Size
76KB
-
MD5
a5645736132b426e8803dcbc90d011fb
-
SHA1
9404858dfb23354c79a2b2d86f36d150b702a345
-
SHA256
4bfce32419832ee43eff1362ae31e3d59a1be8a7b22a110103f90a3a779a7403
-
SHA512
36c632efbc8aedfc30455d1fb576f8b25fb43ed28988d281c5a0c823debd07e8675b151cd3718c44472cae8e1fcae8a77fee981149882870d19b1041d78b0644
-
SSDEEP
1536:sURXLMJ3X45PQEmen/oYDjRZUKrnnPi9X0CI+hrTaPYE6qgmncnnnnnnnnnnn7:V2X45oE1AYDjoS4TGgd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5645736132b426e8803dcbc90d011fb_JaffaCakes118
Files
-
a5645736132b426e8803dcbc90d011fb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nah Size: 883B - Virtual size: 883B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ