Static task
static1
Behavioral task
behavioral1
Sample
a6a5bd532a706b5168066e047f718c88_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a6a5bd532a706b5168066e047f718c88_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a6a5bd532a706b5168066e047f718c88_JaffaCakes118
-
Size
57KB
-
MD5
a6a5bd532a706b5168066e047f718c88
-
SHA1
a444c243047019f068bd34f194dfc44d8a823cba
-
SHA256
1ce3f89e267142f8be19e1a7148e39e3b75e457019c66d63b2cea0ec51ef6e0e
-
SHA512
de8e50dac65a95f4e112663614e212ec7b8654fdcb1822cc723b9705e418eee083cd5b249d5585e79fe9241d6204eb06ee80d754eeee93253c5b50bb7be73426
-
SSDEEP
768:7miRiGum64NnbQbWwfIEk+XEWQpB/Ogb08Lwvl7GmIOgQSYcuxQCF:7xDuX4JwfDkrOgbR2SYcux/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6a5bd532a706b5168066e047f718c88_JaffaCakes118
Files
-
a6a5bd532a706b5168066e047f718c88_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ