Static task
static1
Behavioral task
behavioral1
Sample
a634ae656ce46ea2c61554a7457d5c73_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a634ae656ce46ea2c61554a7457d5c73_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a634ae656ce46ea2c61554a7457d5c73_JaffaCakes118
-
Size
377KB
-
MD5
a634ae656ce46ea2c61554a7457d5c73
-
SHA1
a0d08c9fda21669d83a85861fe01d06ccb2bb438
-
SHA256
e0988da4871e2da2e1a40f440d87aa091ffd0f5a74ddcaf94a42f5b4c0d739f7
-
SHA512
f89fc25153b0b29b728a7e4cb2e3db52955ace9604c365a3f3904d612d9154900f264267bdc38556fd689ed00033c72a16742b9b74481d7e6557ea48959d4fd3
-
SSDEEP
6144:hcaHOTTzU0iaHO74sowKHL7fIWU9XimWOxm7JCqIEle51+V8nC33Sr3svoS:hcqOTfzyBoH7fIxZWmm70qp0HgkC3CrW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a634ae656ce46ea2c61554a7457d5c73_JaffaCakes118
Files
-
a634ae656ce46ea2c61554a7457d5c73_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 352KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 370KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE