Static task
static1
Behavioral task
behavioral1
Sample
d4a7ac5182acab02622e42fd2a4feeaf_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d4a7ac5182acab02622e42fd2a4feeaf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d4a7ac5182acab02622e42fd2a4feeaf_JaffaCakes118
-
Size
61KB
-
MD5
d4a7ac5182acab02622e42fd2a4feeaf
-
SHA1
45d651639b9b9e81288dc0e2b09ce16f6618b75b
-
SHA256
97ed610df70cc2269b87f924c03c9448ec86dc9a3645fe3b6309689cac9f7a52
-
SHA512
1163256e725800f9122a2bfa4b60dfca87c3ee9ecf27aacce9b3dd9716a6d487dccc72a2bcf12fcde360ab8c25c7123ba645cd58c0c79812b1a6766f6e6f29b0
-
SSDEEP
1536:EmVq+Iz9hHQ0UlLdnFt8KZbaOp22XfUgOgsLhmgqcID2:XIxhw0UlL3KKADgOxhmRcIK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4a7ac5182acab02622e42fd2a4feeaf_JaffaCakes118
Files
-
d4a7ac5182acab02622e42fd2a4feeaf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
asp0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
asp1 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE