Static task
static1
Behavioral task
behavioral1
Sample
a7ca7d36d3c2981e96ecc35ad3f0ab77_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a7ca7d36d3c2981e96ecc35ad3f0ab77_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a7ca7d36d3c2981e96ecc35ad3f0ab77_JaffaCakes118
-
Size
50KB
-
MD5
a7ca7d36d3c2981e96ecc35ad3f0ab77
-
SHA1
25f2b0963ba08efe3085e5b4e4c50ec76a43a070
-
SHA256
2e5c4dd2bd122a711cd1c8f4dc7bbac3bd26c55b12db2cc2169ede3f97376183
-
SHA512
9c15a8c048bb7f2df048de6c708c69d4058610d5784be50c5c0dc6d83deda9d6ef4e0134485ed19e2d5002c6940b73b2c018c8fc42493fc291ada0a8cc0af95c
-
SSDEEP
768:py3feVc+9z5GwQxoJB1K5EDN6ivGJXvxFxp71G96LEfB5mSHM:pyPee+9zrPJB2EDN6rQDI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7ca7d36d3c2981e96ecc35ad3f0ab77_JaffaCakes118
Files
-
a7ca7d36d3c2981e96ecc35ad3f0ab77_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
TRmt Size: 26KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uycudd Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ezigg Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lamer Size: 512B - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newimp Size: - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE