Static task
static1
Behavioral task
behavioral1
Sample
f702ca1f8aefa166c23a1d9cc99b62ae_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f702ca1f8aefa166c23a1d9cc99b62ae_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f702ca1f8aefa166c23a1d9cc99b62ae_JaffaCakes118
-
Size
158KB
-
MD5
f702ca1f8aefa166c23a1d9cc99b62ae
-
SHA1
96931e0ef0c835a09111619fd8e7a97a1e7a1c54
-
SHA256
39be72d9d3d8d5c7ab4e4dbdc5c0449764ae38e481f08817138be25f348615e1
-
SHA512
9429beafb65e4e3a35dbcedb65c004fb81a9c482b25e7a157efc964612059ebae6d0f97850d37ecf3b04047888fd1ee375f434f329610fbc013a842398e80620
-
SSDEEP
3072:h4VDfjWFB01kDJcpDrtwYJ/RKYUAEl6h/dpFMRNCV2Ojvr31EP7p7rbT1:aNA3eGsKutnMKV1jREjpjB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f702ca1f8aefa166c23a1d9cc99b62ae_JaffaCakes118
Files
-
f702ca1f8aefa166c23a1d9cc99b62ae_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.ASPack Size: 512B - Virtual size: 428KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ASPack Size: 157KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE