Static task
static1
Behavioral task
behavioral1
Sample
77a9a20d96483bffbe323e5f9d341370_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
77a9a20d96483bffbe323e5f9d341370_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
77a9a20d96483bffbe323e5f9d341370_JaffaCakes118
-
Size
678KB
-
MD5
77a9a20d96483bffbe323e5f9d341370
-
SHA1
6ce5e917edc8a0fb7430a0e9893d9bc0b1b4a055
-
SHA256
eb797910513da14de109e35c180acc0fbed66a07b275f836c7fccdd2c274d022
-
SHA512
09c990ffb7bf57b155d0f452eebe8c88307f8617f7bd89965dc281b0d0d6bc0d9ac6eef367f3ae33c9e310b5fec0c6707e275f34ac651025462e2c1ba62b8af9
-
SSDEEP
12288:UZWtI6Rk/eZJys73dOvXDpNjNe8NeZJys73dOvXDpNjNe8SYeZJys73dOvXDpNjT:Uuha/eZJ8NI8NeZJ8NI8veZJ8NI8r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77a9a20d96483bffbe323e5f9d341370_JaffaCakes118
Files
-
77a9a20d96483bffbe323e5f9d341370_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ