Static task
static1
Behavioral task
behavioral1
Sample
a796a1050e842fc4bcf1e44940004e14_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a796a1050e842fc4bcf1e44940004e14_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a796a1050e842fc4bcf1e44940004e14_JaffaCakes118
-
Size
76KB
-
MD5
a796a1050e842fc4bcf1e44940004e14
-
SHA1
149cf7f7c15db80d9c21852c817956d3fe524b31
-
SHA256
5a240bad0bd0eb7d6b7b4e14bcf5df2212d745d7c05f22871969df900d92cc91
-
SHA512
8fc0c658a2c03c1748551768ca81a1df46d5759066d12c37036d75d364eb04a6702decefab78e2bdbd9fdfee59ef2e1e04f8aa99f3f8a5b3b847a6bc82686838
-
SSDEEP
768:fk5Se7llJNVLFupTaOxVlASBpTTyjpkptftWJmiaeDVdEuZJ46kM+AX:6Syl/W2N0hKitF2mReDVdV/46k5a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a796a1050e842fc4bcf1e44940004e14_JaffaCakes118
Files
-
a796a1050e842fc4bcf1e44940004e14_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 112KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ