Static task
static1
Behavioral task
behavioral1
Sample
70573e6447e2acc85ef0e816ce907549_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
70573e6447e2acc85ef0e816ce907549_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
70573e6447e2acc85ef0e816ce907549_JaffaCakes118
-
Size
17KB
-
MD5
70573e6447e2acc85ef0e816ce907549
-
SHA1
134fe530053d38dd5885289912a631b8cdf7e6df
-
SHA256
cb4ed38316f09138883ae924c537739c148f0b1395a8b43a66f142fb968f4d58
-
SHA512
f359b4eb1023ab7adf999538177983cf555b5635af884a99ae1c5272a95a8b4480fa63a42e5f1b74cbae03e56558fb6c3149ec94f1d6acd9d5044e27fe1f81ed
-
SSDEEP
96:WjQrtbwnvB4KJISPXIZgDiBTmorNCJBmbpHjHz6FHcS0ev1z6A1:uQBwnvBdf/IuDi1FZCJ0bpHyaS0evMA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70573e6447e2acc85ef0e816ce907549_JaffaCakes118
Files
-
70573e6447e2acc85ef0e816ce907549_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 998B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE