Static task
static1
Behavioral task
behavioral1
Sample
a9231816e8433a83dc43e9a73b7dbc36_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a9231816e8433a83dc43e9a73b7dbc36_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a9231816e8433a83dc43e9a73b7dbc36_JaffaCakes118
-
Size
327KB
-
MD5
a9231816e8433a83dc43e9a73b7dbc36
-
SHA1
369456ba8a264c96e22792600da13bd69631d287
-
SHA256
77e8fc645ecc22b1c7de70b0f33129ff8f1fa64809eb49305cc6b96fc4b95da3
-
SHA512
9cbf6b6e4ad52b2ac1a850fb37191b95c7fecc235a14e0a93c37769a9e0eb83be55e2ed267e8448d1d535cb030ec92be11597b6983eb3c2c5adac6285523e1ae
-
SSDEEP
6144:cVF2idZecnl20lHRxp3g3o1vQUeA1wYDAJouTr7S9LsKGCBnczn8rckIo:c/F3Z4mxxzaUeY8WuTsslwS8rckIo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9231816e8433a83dc43e9a73b7dbc36_JaffaCakes118
Files
-
a9231816e8433a83dc43e9a73b7dbc36_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 6KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE