Static task
static1
Behavioral task
behavioral1
Sample
0a4040937a209f2a11a5730a58e8d4cc_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0a4040937a209f2a11a5730a58e8d4cc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0a4040937a209f2a11a5730a58e8d4cc_JaffaCakes118
-
Size
9KB
-
MD5
0a4040937a209f2a11a5730a58e8d4cc
-
SHA1
7ea6c1214fb95fd9545c84a86f19f67c98fb77a3
-
SHA256
a6525a0e6b62665f7dcf61248f4d7ceaaf2f3a116a229607a74325237de2c4ca
-
SHA512
e8188aade319d110aeb801c84a6ba2c8b51e7ec3371de5d9b0aaf0f9cea3d16ca69723bfbb379d2e668b35e1dfcaaa123f744963c573e9c3a80bb8d4c69c77d6
-
SSDEEP
6:idquVg3F+X32exhtA4g2tlADClwjb2w+OYrtI/zrlBlkwuMvaAgVz1:eVGSGex7U2TwmwBY5mrlTk1ca
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a4040937a209f2a11a5730a58e8d4cc_JaffaCakes118
Files
-
0a4040937a209f2a11a5730a58e8d4cc_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 171KB - Virtual size: 171KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 67KB - Virtual size: 810KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ