Static task
static1
Behavioral task
behavioral1
Sample
ac941ae94c4b3b213537d0a778d716ef_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ac941ae94c4b3b213537d0a778d716ef_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ac941ae94c4b3b213537d0a778d716ef_JaffaCakes118
-
Size
320KB
-
MD5
ac941ae94c4b3b213537d0a778d716ef
-
SHA1
4f7fb64d07b5514ea7409ee85d5bbb08ca7d3593
-
SHA256
66bd8a0b97785a2846d7c610789cb2a578a9ef50f83c7264b9f9f94e48055276
-
SHA512
7a5c377ce200c6a727462994bb474108af111ba5c27020460991fb6c820cbd10d5be939e514cd1345fc55019d81c172ab999c3ec26fac76a3a933698ce052366
-
SSDEEP
3072:q9mMG9uVwq5hVF31MzrHcD8asohaiyDVsG:q9mvbq5hVF3if8gaiiaV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac941ae94c4b3b213537d0a778d716ef_JaffaCakes118
Files
-
ac941ae94c4b3b213537d0a778d716ef_JaffaCakes118.exe windows:4 windows x86 arch:x86
b2ec40e45c20bb175925136232f41798
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
NdrComplexStructUnmarshall
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: 260KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.brdata Size: 4KB - Virtual size: 128B
Yi2OlB Size: 4KB - Virtual size: 256B
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.textin? Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.textin? Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.textin? Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ