Static task
static1
Behavioral task
behavioral1
Sample
a55e5f7cb906da969c05152b17571311_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a55e5f7cb906da969c05152b17571311_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a55e5f7cb906da969c05152b17571311_JaffaCakes118
-
Size
391KB
-
MD5
a55e5f7cb906da969c05152b17571311
-
SHA1
22dcde3477a4b055fb94ebf2748f9a71852a8546
-
SHA256
9f04c2a9c48b1f3556afc2cac5b600c0bb82998f94f210649df8cff4d59c846d
-
SHA512
0187536abb34e53ff859a93f17aff3c55b88d0003c8a4392289dcd8e78b116d2d026bdbe2d4267680de5f8b0e897e04c867a2ea8886d46033f44f23e7890dd87
-
SSDEEP
12288:Wr91aus6K+qEy4ofClimDX4jnCA5Ii+9vjGKWDrGbC:Wr3auBKsy4oKYmk+A5I53AMC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a55e5f7cb906da969c05152b17571311_JaffaCakes118
Files
-
a55e5f7cb906da969c05152b17571311_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.wETOV Size: 386KB - Virtual size: 460KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.6F3 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SzC Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.7me5F Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE