Static task
static1
Behavioral task
behavioral1
Sample
0a40921e9fa16f36193cf1b04d2e44b8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0a40921e9fa16f36193cf1b04d2e44b8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0a40921e9fa16f36193cf1b04d2e44b8_JaffaCakes118
-
Size
39KB
-
MD5
0a40921e9fa16f36193cf1b04d2e44b8
-
SHA1
94dc68a8eed72d2639521c8081fa7c0c5152c832
-
SHA256
6d97099ee438a3647c042858b6ceb891b4d65f3b9be92665fde72fedc754b6c7
-
SHA512
fb21f105d97cb19cf4295526d7084a0dfcd3905a9522209ff36fc3436054076e298a8b8f15a8e1bdbf40aad89948fae90c037997d0e02e787f6c8662f3bb4cec
-
SSDEEP
768:VxxzwRDZ7LZDbY+3MIzOBSp8M+W0wwJ2Nr1a:VxxzwRDZC+cIzPp8MxkJYxa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a40921e9fa16f36193cf1b04d2e44b8_JaffaCakes118
Files
-
0a40921e9fa16f36193cf1b04d2e44b8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.121212 Size: 683B - Virtual size: 683B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ