Static task
static1
Behavioral task
behavioral1
Sample
a58f630a832707df489bf10ed9274db7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a58f630a832707df489bf10ed9274db7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a58f630a832707df489bf10ed9274db7_JaffaCakes118
-
Size
33KB
-
MD5
a58f630a832707df489bf10ed9274db7
-
SHA1
0ef96721289b5feebe63881eacc8ea87e7133fa7
-
SHA256
6148b7bb51b7d35cedfe9bf2e37e1e9da1f3823fcf91338eea0e0a41188e5e7c
-
SHA512
a0b1a19802358e9d4f222ad01f681a09cae0bf0d02a524212ce7f1ac809fd7783c731a03f2effac96b93a098fd2e1fe3b8221c9eb48a4957d3f815904b95b5f4
-
SSDEEP
768:M5n0yRDXgQ4Q7sZTDdShTu+5lE0oU98fpq0Bi0tEq/:MWGXl4Qg/doK4lE0Tot
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a58f630a832707df489bf10ed9274db7_JaffaCakes118
Files
-
a58f630a832707df489bf10ed9274db7_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.nah Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE