Static task
static1
Behavioral task
behavioral1
Sample
a7e5c6b123c43802b8d5bdfc252e97db_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a7e5c6b123c43802b8d5bdfc252e97db_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a7e5c6b123c43802b8d5bdfc252e97db_JaffaCakes118
-
Size
399KB
-
MD5
a7e5c6b123c43802b8d5bdfc252e97db
-
SHA1
9fc45dc10608ae235055b39ba8fb1209b6789404
-
SHA256
eb708e32d7b6e337167b9d142cd13d0c1663009ff514adf7a26e614a01549ccf
-
SHA512
804cc05738c2cc54830dcde56c64f5906579308f5eea4676a6f264c481b65bde3c648792c3ef7bab0102fcf6dd9eacfa37a13c6031230906fdc4b8cf50e99469
-
SSDEEP
6144:/629XLBXeplCy8EC7KDZBjMXk0g80gOaZ5k1YOyw98gWNlPTGQQm6agrdW1Et:/LLMy0MUKROdINtTirdW1E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7e5c6b123c43802b8d5bdfc252e97db_JaffaCakes118
Files
-
a7e5c6b123c43802b8d5bdfc252e97db_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 18KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 75KB - Virtual size: 20.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 156KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE