Static task
static1
Behavioral task
behavioral1
Sample
7d89c65e2d222f73ba0bf5bd8d05701a_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7d89c65e2d222f73ba0bf5bd8d05701a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
7d89c65e2d222f73ba0bf5bd8d05701a_JaffaCakes118
-
Size
741KB
-
MD5
7d89c65e2d222f73ba0bf5bd8d05701a
-
SHA1
ab5e472d990c894a4cfec4e3eb826c146bde33a7
-
SHA256
00aa9f314451e2d1e534f4e6402cbaf230b8b132133590b54e7370778af46fd8
-
SHA512
e59c36df45bef6317f769e5945c869e8bfe3c5e60d6f7edb9157a092d3172d1e16638bcaa2836078225e3672c4b04248c847fb37d2ed24332c48f7ea1ed627ec
-
SSDEEP
12288:UZWtI6RkqeZJys73dOvXDpNjNe8mawOEeZJys73dOvXDpNjNe8maNqk:UuhaqeZJ8NI8laeZJ8NI8lAk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7d89c65e2d222f73ba0bf5bd8d05701a_JaffaCakes118
Files
-
7d89c65e2d222f73ba0bf5bd8d05701a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ