Static task
static1
Behavioral task
behavioral1
Sample
11afe9c99de1304aa74d7ef88be4481a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
11afe9c99de1304aa74d7ef88be4481a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
11afe9c99de1304aa74d7ef88be4481a_JaffaCakes118
-
Size
30KB
-
MD5
11afe9c99de1304aa74d7ef88be4481a
-
SHA1
76b23ec883d8d07591f991878988dae6c62b3819
-
SHA256
a1ce6200523665ed438e3deea543b67b14d1bd94d5119f8d77c8800dbc23bf09
-
SHA512
b4b5688a497d1b2ee92bfb76ef5c7d79aee5ce3ac1091158b6213a22cb116b2da2855a11846c21ff3901fa7371a5834bdaf08577da414771f5d6d672f88cf6c4
-
SSDEEP
768:9lMXlD5iYtp1LugI4/LVdPjmOMq4y/2wWf20hVH:fMhrTIgRxjmO14y/2wQNVH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11afe9c99de1304aa74d7ef88be4481a_JaffaCakes118
Files
-
11afe9c99de1304aa74d7ef88be4481a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 755KB - Virtual size: 756KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 77KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 334KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ