Static task
static1
Behavioral task
behavioral1
Sample
a952664d292af9ffd103af2c2cbabb59_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a952664d292af9ffd103af2c2cbabb59_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a952664d292af9ffd103af2c2cbabb59_JaffaCakes118
-
Size
134KB
-
MD5
a952664d292af9ffd103af2c2cbabb59
-
SHA1
fdd85358fd01be3ba4e84403b83c035c76671b75
-
SHA256
d55172fe7c433f713393ad656c4b2b39bd6a550a9d5be11b1ea7b685300f38aa
-
SHA512
a2108967a2ac96309c3b822dc0f1d60696a03592749fd4ec8cafcdd19b1fd14f170ee27c6d5d4b9ab399226c76efea31376f4610aac4568f331160ca030a8ce2
-
SSDEEP
3072:XXcH3gPi0Z1960YBpFmUvQ7NQpU/Zh3Rmto:nLi9tBpgXNQa/ZhBt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a952664d292af9ffd103af2c2cbabb59_JaffaCakes118
Files
-
a952664d292af9ffd103af2c2cbabb59_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Zafer Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Zafer Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Zafer Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Zafer Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Zafer Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Zafer Size: 596KB - Virtual size: 596KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Zafer Size: - Virtual size: 1024KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE