Static task
static1
Behavioral task
behavioral1
Sample
a5f187d3d4c9d8c894cc93c67df1d1a1_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a5f187d3d4c9d8c894cc93c67df1d1a1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a5f187d3d4c9d8c894cc93c67df1d1a1_JaffaCakes118
-
Size
600KB
-
MD5
a5f187d3d4c9d8c894cc93c67df1d1a1
-
SHA1
7cb82f4be2317ed684f0c0567900dc49ea166173
-
SHA256
40b070c1690675e8d818d931474c384416f79198a89b1303d334a358e7208ec6
-
SHA512
ef7d3dda118815ef4b8fe8a559dda29e707a24d8f6fcb270b5e6338469c7d380290717301750c0368ca72f529a03522fb29b563a08d7f79ba809184419571496
-
SSDEEP
12288:WRKw8t1COEpPm9n2yU/lmYp01DBlNAkJmEHMro98h/cCaVYQBlF:WRKwGD8K9U/l50Bkkj598SVYQ/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5f187d3d4c9d8c894cc93c67df1d1a1_JaffaCakes118
Files
-
a5f187d3d4c9d8c894cc93c67df1d1a1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 158B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fros Size: 570KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE