Static task
static1
Behavioral task
behavioral1
Sample
a65bd02d0d070f52c1a8d83319ca43af_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a65bd02d0d070f52c1a8d83319ca43af_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a65bd02d0d070f52c1a8d83319ca43af_JaffaCakes118
-
Size
70KB
-
MD5
a65bd02d0d070f52c1a8d83319ca43af
-
SHA1
ade340c2079219fe6ac39b064d358da1e05af643
-
SHA256
37900164a396d505508d07d317bd3f4926ebd490cc7f9c97c7e807af1ff3560e
-
SHA512
a6b54df2c2c0d0ea1320a36d00d3a7f9a836db6795062459270d3753b06b935d2df08f02d5eb20cc956a281d39094bf78179a621c62c8f61786b1a789fe00969
-
SSDEEP
1536:NEXuxXOfVgi1jVs6E0cvLeBfv3JC5hiMh:Nl1Ot5pDE0cSB35wc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a65bd02d0d070f52c1a8d83319ca43af_JaffaCakes118
Files
-
a65bd02d0d070f52c1a8d83319ca43af_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aqynuy10 Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8zkxo9kf Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE