Static task
static1
Behavioral task
behavioral1
Sample
1724b99fb4f95e813b33fd1929ed9b9a_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1724b99fb4f95e813b33fd1929ed9b9a_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
1724b99fb4f95e813b33fd1929ed9b9a_JaffaCakes118
-
Size
44KB
-
MD5
1724b99fb4f95e813b33fd1929ed9b9a
-
SHA1
d3acaf957fbc515d563ab4b94c678f86d1f8008c
-
SHA256
1a7a7ccc236c2ddfdbff39a841b269c8d2903121af7802348e479bc77b96b0b8
-
SHA512
9e0cacfb520bbff5ba67755e1d37d0a20fddc1d01af31ccd4ef3910947c8a19642e8ef832f58ff6cb648202ee70c4febc612f5004678fac6be02b8a91b8f4cb3
-
SSDEEP
768:Aokg7Q3BHj9NiPx4OnEEwxR61eP/pU/8mEY/UBbs5Vx7nHGGd+F3hKFk+:I0yZeP1/Ao1ePR3ZBg5v7nHGM+TE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1724b99fb4f95e813b33fd1929ed9b9a_JaffaCakes118
Files
-
1724b99fb4f95e813b33fd1929ed9b9a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 88KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 272KB - Virtual size: 270KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ