Static task
static1
Behavioral task
behavioral1
Sample
1317a92ad45c07728dc3a4c52bcd8464_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1317a92ad45c07728dc3a4c52bcd8464_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1317a92ad45c07728dc3a4c52bcd8464_JaffaCakes118
-
Size
81KB
-
MD5
1317a92ad45c07728dc3a4c52bcd8464
-
SHA1
da866e2d1539330bcf625fac1f69615831669e32
-
SHA256
b1f43ffb1124d167ae878a0aabccf9a6c6a9dca97560f3b2a865e3659d5d1736
-
SHA512
ae59d2e8f1d6fe9f8bd615d9ceda3f16c3b5a3fff44574db3a2811208492702d420b554a33ba88933a53cfa1c9143642c3214d334b26fa848f8706aa59edd267
-
SSDEEP
768:VePWcFbiRLsFX2p4/JMJmkJU9DPRd1ktyLaRg8fFs8ksN7uhT:VePWcF/X24OIkeh1kty2vPN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1317a92ad45c07728dc3a4c52bcd8464_JaffaCakes118
Files
-
1317a92ad45c07728dc3a4c52bcd8464_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 876B - Virtual size: 876B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 698B - Virtual size: 698B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE