Static task
static1
Behavioral task
behavioral1
Sample
a7e9cecd37710127042e161d56e71b92_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a7e9cecd37710127042e161d56e71b92_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a7e9cecd37710127042e161d56e71b92_JaffaCakes118
-
Size
22KB
-
MD5
a7e9cecd37710127042e161d56e71b92
-
SHA1
f4c021bf4613d22814797f98dabdb48f36ae5c80
-
SHA256
f7efb93125f4a587977ed7bad6206f10cc9a74a71d7c733d4e23fa8da80bb3d6
-
SHA512
e57c8ea5a18db387fb0027d69112403c115a46b39ba2248bb5385038b5de4427f97440dec9693eb71fd09d507ad4cf273a10722e21aa8b5430fc0c5bfbe8b6ec
-
SSDEEP
384:ll2vDWLZ2TSrk8Jv6ELasPFiNybIAHjrhb72hUBH7bD98f84KrPO+A:X2q6/EfOhGrhb7yUBbbhq8nDO+A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7e9cecd37710127042e161d56e71b92_JaffaCakes118
Files
-
a7e9cecd37710127042e161d56e71b92_JaffaCakes118.exe .ps1 windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE