Static task
static1
Behavioral task
behavioral1
Sample
a79b3c4d1e6155973d6d538834f4830f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a79b3c4d1e6155973d6d538834f4830f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a79b3c4d1e6155973d6d538834f4830f_JaffaCakes118
-
Size
81KB
-
MD5
a79b3c4d1e6155973d6d538834f4830f
-
SHA1
c9fbcba2a40d6239f7f66e31770f3df7c7223fbf
-
SHA256
365b042308ebff9f6d6a0971dedbc5d3e1b0ad8c5a9eb1c418d0b8f2ce44fd3f
-
SHA512
a532ca1c8bb8e66643ec92794a29d85d8f0be140702b6abf7da2e05aa5d4b5cd4ce6d26c9b474c863fdffbbe176bb516464b1fe2ed102df2b7749499b68bfd31
-
SSDEEP
1536:bHJ/k8z8SvneGUWPKcArBwgTzC2jNIb91p4xknXFeVk2otiT/D1:j9kHSfcrhChb91+xMeVkM/B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a79b3c4d1e6155973d6d538834f4830f_JaffaCakes118
Files
-
a79b3c4d1e6155973d6d538834f4830f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 69KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE