Static task
static1
Behavioral task
behavioral1
Sample
07a4855779eb79e5c99a29c2504e3ab0_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
07a4855779eb79e5c99a29c2504e3ab0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
07a4855779eb79e5c99a29c2504e3ab0_JaffaCakes118
-
Size
192KB
-
MD5
07a4855779eb79e5c99a29c2504e3ab0
-
SHA1
4231fd0a72c76f0970aa7ecfb6a0b290a9e94e42
-
SHA256
47c71b86400d379081201df4f1a02472e6385593fc46666d7171e73a758c4dc7
-
SHA512
5c0a9a66df843c7b34c9d73ec678da6b1497a25073ac32c625a32c70f5b68a856a88d979ff046ae3e73174f94adb2f19414ad29afcfde5b7e7bc6ec03c9d500b
-
SSDEEP
6144:8XyX7UXyKBYpbC6RqR7U55ygee25qIcMS7b6Ipj:8iAiWYpbNRN52e7MS6yj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07a4855779eb79e5c99a29c2504e3ab0_JaffaCakes118
Files
-
07a4855779eb79e5c99a29c2504e3ab0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512B - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 191KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE