Static task
static1
Behavioral task
behavioral1
Sample
0764526d38b20516a5d8601d893bbacf_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0764526d38b20516a5d8601d893bbacf_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0764526d38b20516a5d8601d893bbacf_JaffaCakes118
-
Size
794KB
-
MD5
0764526d38b20516a5d8601d893bbacf
-
SHA1
edbdb41d9937725bcc44cfb9f233778e80e86a14
-
SHA256
7699fa1aee18700393fc4d9c9dddb58d20a6a29520bca1b5be53df34ebe4bba7
-
SHA512
20356d43be5cde8292e729c445e30f86d2786e16f0acc695e72f077b2a5525abf0f230e20a37a79e3582f9943699bfa52ef5dc00a6c924d6e70e100b159a9f3d
-
SSDEEP
12288:hadErX+o0BxNyL+rT+frZJut+BvSI8dbQymq2JsNy+zfPjEg9tNmt6i:h6poCsL+ryrSVI8dP2JsNLXXh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0764526d38b20516a5d8601d893bbacf_JaffaCakes118
Files
-
0764526d38b20516a5d8601d893bbacf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 597KB - Virtual size: 597KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ