Static task
static1
Behavioral task
behavioral1
Sample
a9498500e4d8694b6ab066be7c067c3c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a9498500e4d8694b6ab066be7c067c3c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a9498500e4d8694b6ab066be7c067c3c_JaffaCakes118
-
Size
872KB
-
MD5
a9498500e4d8694b6ab066be7c067c3c
-
SHA1
07e677627ea15f0e7c0562573c8c3919e95ffacb
-
SHA256
bdd79d7709adce22a111a94faf3d74c211ff0c414624808b0f7e34800c01f507
-
SHA512
95763d9e40351e44cd13d4371ca18076d944ffa9c98efb0a48ac80e8d508e72831a5154018bae9b05413a52cb1a284a036876bd163b77b373d4e11141acadebd
-
SSDEEP
1536:S8BCvAJPrcbZ2NJ33NYYV61Yzi2rVFupcEcr8eu:0v0rcO33NFV61YziLpcE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9498500e4d8694b6ab066be7c067c3c_JaffaCakes118
Files
-
a9498500e4d8694b6ab066be7c067c3c_JaffaCakes118.exe windows:4 windows x86 arch:x86
20a8824fd363f2f853ecbda6177d647b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ttdd1
principal
Sections
.text Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 86B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 676KB - Virtual size: 674KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 140KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ