Static task
static1
Behavioral task
behavioral1
Sample
02fcd19648bbfa40668e643db6eebbb1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
02fcd19648bbfa40668e643db6eebbb1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
02fcd19648bbfa40668e643db6eebbb1_JaffaCakes118
-
Size
38KB
-
MD5
02fcd19648bbfa40668e643db6eebbb1
-
SHA1
aa6f84724cf9359f8af3304a126b712c9c27cc9a
-
SHA256
09a57e7326d89187c35422a12615aef82794c065633bfc5328a62a7604c06deb
-
SHA512
e9343eebeafc60354cdfd3d6157b94dbc64c6327ca0df64e034874c0db5d624a81d170e71fffaf2a5e4175c86625de0d677b3ddc3fff61efec83b5a14575f0aa
-
SSDEEP
768:Y9p8XUu3PoNXsD6GUktb4KKSQ4tv1dz4REOb2KljLFVX+sWVM08yYvhM:gp8l3JQktC4jdzuZVey08yYC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02fcd19648bbfa40668e643db6eebbb1_JaffaCakes118
Files
-
02fcd19648bbfa40668e643db6eebbb1_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.CODE Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RDATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DAT Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRCS Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ