Static task
static1
Behavioral task
behavioral1
Sample
073879b9dc1e484916ba0645ba1d6a78_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
073879b9dc1e484916ba0645ba1d6a78_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
073879b9dc1e484916ba0645ba1d6a78_JaffaCakes118
-
Size
95KB
-
MD5
073879b9dc1e484916ba0645ba1d6a78
-
SHA1
3b0b070ee6f4877fe86e030b9350d5be2707d977
-
SHA256
8e9af29a2d7a58ba0cd77eb8154129ba7b8f7ef4ed09d75eb6474a216901f618
-
SHA512
6720d91fa251265d5d070299fc63ed560e24f188ef8c52e4324ba88a203eb711af3e250a97b27ef0e3300e0c3eaa78d017eb95af70323fa0e0edeecdd3425e26
-
SSDEEP
1536:gKLo8jrShS7KhUOQEnt4eSFnToIfJV1Nf/dFqZoXeZCEZ6wVOOHtm:RLo8jrShpxt4eStTBfJV1NfSaXekEZ67
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 073879b9dc1e484916ba0645ba1d6a78_JaffaCakes118
Files
-
073879b9dc1e484916ba0645ba1d6a78_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ