Static task
static1
Behavioral task
behavioral1
Sample
a7afee6bb53b9b702df331c74e88dc04_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a7afee6bb53b9b702df331c74e88dc04_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a7afee6bb53b9b702df331c74e88dc04_JaffaCakes118
-
Size
593KB
-
MD5
a7afee6bb53b9b702df331c74e88dc04
-
SHA1
47136178f108fd0b33da59584177f2d8a01d1345
-
SHA256
d1a53a2da9a28b1c2903fefa0bc227d3bbc5357156ab0a6d03a2324673045157
-
SHA512
4162dcb9c9eac00462a378cef89a881692ae3fa5716c6374ecd47bbb120fed75ff71a0247f8ae13ac1a9c2dec153b9fbd68179f41f32c2d7219f225a064836a0
-
SSDEEP
12288:HF9259l42+ieBORz8csL8YddjcF3Z4mxx5BZC5dH8qlXHcVet:HF92RFeBCHiPcQmXrZCvcg3N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7afee6bb53b9b702df331c74e88dc04_JaffaCakes118
Files
-
a7afee6bb53b9b702df331c74e88dc04_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 266KB - Virtual size: 796KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE