Static task
static1
Behavioral task
behavioral1
Sample
75a837edca347f0ade84b5b9d0bb5476_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
75a837edca347f0ade84b5b9d0bb5476_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
75a837edca347f0ade84b5b9d0bb5476_JaffaCakes118
-
Size
989KB
-
MD5
75a837edca347f0ade84b5b9d0bb5476
-
SHA1
27a9d5ff6f0c250809b2ce2edb711a1cfedfe5a4
-
SHA256
8405f85e0e4073e319fb78208f3cae95d830f941d1a6ab67116130ebce3cee28
-
SHA512
1a1b788cee09ee4066203cd4626cabb6ff38ca963a2f311579caf1f79672d96a64a4abb09cafece856c4e017bff3f8d406cd9c5d6876be7d3d545ac60f6b6c76
-
SSDEEP
24576:sx4Mi4+EaWyZDAbKh6tBoJU0DuF4jovaVGMwxJE/qlpzwub:QcEaWjrjiA4jova8Mb/qlpzwub
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75a837edca347f0ade84b5b9d0bb5476_JaffaCakes118
Files
-
75a837edca347f0ade84b5b9d0bb5476_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 684KB - Virtual size: 680KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 156KB - Virtual size: 153KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ