Static task
static1
Behavioral task
behavioral1
Sample
140adb0eece0eb6c02310911f5c95147_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
140adb0eece0eb6c02310911f5c95147_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
140adb0eece0eb6c02310911f5c95147_JaffaCakes118
-
Size
130KB
-
MD5
140adb0eece0eb6c02310911f5c95147
-
SHA1
f00e587e320584a28028df9a3371cf80ee1b78c3
-
SHA256
77d903f777e31eec8998f23d4fd600f4ad817b6ed56e30fc48941e376c0d05fe
-
SHA512
e167b3052202c11bcc4221ecd09c24dda732e3a065f606e306d95f64c371e6a4d189e0db16ffc6bbab2b90bb5f34fe344dd4fcf413fd5d9d019d627bc2658a9d
-
SSDEEP
1536:q1NH0a5fFoAmgiEqWcCGlPUCUKQQb8mv8Y+RdMo4dbcZOYgsJBYMfvivlPozd5DP:CUaFPmgRMNlPTGQQm6ytwZEsrYkK4r/H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 140adb0eece0eb6c02310911f5c95147_JaffaCakes118
Files
-
140adb0eece0eb6c02310911f5c95147_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 126KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE