Static task
static1
Behavioral task
behavioral1
Sample
f762b8cc56802e5978d591e92ea0e780_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f762b8cc56802e5978d591e92ea0e780_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f762b8cc56802e5978d591e92ea0e780_JaffaCakes118
-
Size
4.6MB
-
MD5
f762b8cc56802e5978d591e92ea0e780
-
SHA1
4d49e709dbee71ba89eb002e18ca4e1d53938a89
-
SHA256
61b0b9f40b90a30d0ee9e8b8c5d4128dba647eca32e4e0d3fa8ccbb83cd2640f
-
SHA512
30b456a7898e30eaf1bffa5fe26f2404d3a1c84151d595cf5dc205f6c2f2ed45b02cc092eac8616d7858f4595533dd950740a18ac1fa2dc2bd51dfd852e0df07
-
SSDEEP
49152:b/erQZbd288PerQZbd288PerQZbd288PerQZbd288PerQZbd288PerQZbd288tp:irQZlrQZlrQZlrQZlrQZlrQZU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f762b8cc56802e5978d591e92ea0e780_JaffaCakes118
Files
-
f762b8cc56802e5978d591e92ea0e780_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ