Static task
static1
Behavioral task
behavioral1
Sample
a828148318d0fa70fab0c408806a0e72_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a828148318d0fa70fab0c408806a0e72_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a828148318d0fa70fab0c408806a0e72_JaffaCakes118
-
Size
130KB
-
MD5
a828148318d0fa70fab0c408806a0e72
-
SHA1
ad65f4410f14013b721cf3d92d1570db5c5d025b
-
SHA256
da4b9ed31ce0330d3bb709030da17cec09ef8e5bef68ef06d0602ed8e4c84bdd
-
SHA512
2e7307a9883428cc4a3dd038d0d03b340e32cf83a4a784bfd5d17e740af21a893e4acb99f68096308d2024dd6223bb395c732e73e7fa1541e6dc99ba5e4a157e
-
SSDEEP
3072:r4e3p1ss0UZxkfqlT7QaUYUuJAE+L6ZudXeiBc2:z1sLUZxkCh7RUYUuJAE+JoiBc2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a828148318d0fa70fab0c408806a0e72_JaffaCakes118
Files
-
a828148318d0fa70fab0c408806a0e72_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
g3zosw0 Size: - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
g3zosw1 Size: 130KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
g3zosw2 Size: 333B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE