Static task
static1
Behavioral task
behavioral1
Sample
73ac3d3671c55618e31e2e3d668d3186_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
73ac3d3671c55618e31e2e3d668d3186_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
73ac3d3671c55618e31e2e3d668d3186_JaffaCakes118
-
Size
1.0MB
-
MD5
73ac3d3671c55618e31e2e3d668d3186
-
SHA1
dbb54bed305f77af2cb299ac843e9e0a137ef65c
-
SHA256
73a98a6b391f978179322edba6ab525d86adba220ab4ed219b8f9ecec021959b
-
SHA512
1bebe1e36321817662f07eff1d2e30bce155482aeb2a7ea5171b6a8e471d4f8cd65dde6eb10d27a5e18b05b9ece824de90027d5102b1c53a67ee9fd1a6381f1d
-
SSDEEP
24576:pRfype0AqV38mJNv3/AbEYnwf3W8QgJO/CwBSmq28wy5kYc:pR6peU8m7/A/nQikO3smq2FkkR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73ac3d3671c55618e31e2e3d668d3186_JaffaCakes118
Files
-
73ac3d3671c55618e31e2e3d668d3186_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
Sections
.text Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 578B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ