Static task
static1
Behavioral task
behavioral1
Sample
a640bf5a0150af5aa69bf155a6df4c81_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a640bf5a0150af5aa69bf155a6df4c81_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a640bf5a0150af5aa69bf155a6df4c81_JaffaCakes118
-
Size
279KB
-
MD5
a640bf5a0150af5aa69bf155a6df4c81
-
SHA1
aac0695d93e66eb6eebe28432d573a3e015507f7
-
SHA256
46e67ee8c0e038f7b92d3c1d355926ce8fa644a6bcf5af97cc723f664d9b6b33
-
SHA512
b8c47aa11a4b670c8f78f46f5232cc02f18a619782fa991da9613639478026e87f3f04a7403530be37ac181eeff101b935c1fbdc00b5fdea9c5a7f9d7def291e
-
SSDEEP
6144:/xrEmcTGAX2Ua3UbF50cxooSF/0VqsInWYINgpUgdFY:+skbF50cx1SF/WqjxpU9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a640bf5a0150af5aa69bf155a6df4c81_JaffaCakes118
Files
-
a640bf5a0150af5aa69bf155a6df4c81_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE