Static task
static1
Behavioral task
behavioral1
Sample
758012220cef4edad6ba1ebafe24dee3_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
758012220cef4edad6ba1ebafe24dee3_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
758012220cef4edad6ba1ebafe24dee3_JaffaCakes118
-
Size
212KB
-
MD5
758012220cef4edad6ba1ebafe24dee3
-
SHA1
9b3d187f53c11582778edee93ccb080a38309cec
-
SHA256
0acb5683a83771d1389e067cfab50e5440a8a5b44ee4c9aa98e8b20eaf10d8ec
-
SHA512
c4d04f01ed9cc0166b5c4a8ffcd836eaf168840485f7b36c85ca497eeec713bcf6fe3505d5b4db07fb649928ff9913b03758c083a5f7b22aa833eed180d8a492
-
SSDEEP
3072:TtWd278D1U4Ssv5iCCFh7asIEzCcQ0MAEo9FeMRHCFmtftbmwsTXotML/CXFqqmp:TMd272HNMus7zCcQ0JbF27yQfxIg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 758012220cef4edad6ba1ebafe24dee3_JaffaCakes118
Files
-
758012220cef4edad6ba1ebafe24dee3_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 170KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 177B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ