Static task
static1
Behavioral task
behavioral1
Sample
a92dfe658a2d5144ef4a3f363fd5ad30_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a92dfe658a2d5144ef4a3f363fd5ad30_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a92dfe658a2d5144ef4a3f363fd5ad30_JaffaCakes118
-
Size
18KB
-
MD5
a92dfe658a2d5144ef4a3f363fd5ad30
-
SHA1
86b7779c91f3f9f8acbdcc5f704309cea9f5473b
-
SHA256
165be815fb9a939fd08a4514263c82a2c2b4383aedb2b434da94589bb529af15
-
SHA512
3bfb5b2558ad0cd4cf2a79dc0cce5ab19b262d707abf005d0965e5e252ecfba7f5b88cf884b4625e4666fa877d15123b7e6a00c8c57023fe61ad01d75db40bde
-
SSDEEP
384:zpRBncF1hgH+OqKu22JxB7HgPH8W7lxyGO0ytkwcC8a0Ee9JJdyPZV:lRBQfs+OqVNxB7YEGyfEyL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a92dfe658a2d5144ef4a3f363fd5ad30_JaffaCakes118
Files
-
a92dfe658a2d5144ef4a3f363fd5ad30_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 296KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE