Static task
static1
Behavioral task
behavioral1
Sample
a546881e9a422c39103a2d33a96d035b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a546881e9a422c39103a2d33a96d035b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a546881e9a422c39103a2d33a96d035b_JaffaCakes118
-
Size
18KB
-
MD5
a546881e9a422c39103a2d33a96d035b
-
SHA1
b9917e5a235212d186736a49df3a8b951e9e718f
-
SHA256
1d3dae4e7246c985e0e23cb81dcf2019b77f75424ca24ec5ca191ff4525c0f35
-
SHA512
51cfa89d27521dafe1eb9b8046580f16d6a7cdd9505d835c62408f08a8a510c312631243ceb3bae762afa703cf7b7d46568d3d2bd9a5293e75cbc1420f8b4a84
-
SSDEEP
384:It0cHn8tiDXCbnG5hKcef5pVpBtwdvE0F61H0FLu3Y1MIGnpDu1enO:ptumG50cefDUF1Roo1bquB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a546881e9a422c39103a2d33a96d035b_JaffaCakes118
Files
-
a546881e9a422c39103a2d33a96d035b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE