Static task
static1
Behavioral task
behavioral1
Sample
79290a7932678e15ea3efb23788e0bd9_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
79290a7932678e15ea3efb23788e0bd9_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
79290a7932678e15ea3efb23788e0bd9_JaffaCakes118
-
Size
108KB
-
MD5
79290a7932678e15ea3efb23788e0bd9
-
SHA1
8dc83219fba2a204dd18b137236263861ce9179a
-
SHA256
d4fc8c0f6f82e08b38695a55add0c66ef8b679fbd05510e44ab1e315c266f328
-
SHA512
c810c4b1f2038ed8b61cb71ee691b60e963f724cafd2e66bfbc436dd25b0a11c48f4f43bdd3b9edc44d649a4c4736cd336cf62c49e5b92cb7357c747ff569a75
-
SSDEEP
3072:YszZnKNLSfWInbuLB9xeCBLu4+uIrjDHm1G6H:Ys8ZSfWInb7CRu4EjDKJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79290a7932678e15ea3efb23788e0bd9_JaffaCakes118
Files
-
79290a7932678e15ea3efb23788e0bd9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ