Static task
static1
Behavioral task
behavioral1
Sample
1725685fd74d35122680f7f8e5bd878f_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1725685fd74d35122680f7f8e5bd878f_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1725685fd74d35122680f7f8e5bd878f_JaffaCakes118
-
Size
108KB
-
MD5
1725685fd74d35122680f7f8e5bd878f
-
SHA1
cc24918ee0ce2fca326c3178d069d8d356c85b4c
-
SHA256
96ca3a90b174724840391986459bb44c84fa6987bf7fb86b0c6364e5d3f99bc7
-
SHA512
da78d296697623837d14e12420b4f23a7749db547c248382c51a8c134d167c6b914bf47db8343c791fd628f2ad8edbbca536c5750e7715483c2f072264aeb3c6
-
SSDEEP
1536:8chwBT2pZY0lB6v5yG1lrCYZNmVFK1pNJ7okGk:8PBTEB05VlPZtjJ7+k
Malware Config
Signatures
-
Nirsoft 1 IoCs
resource yara_rule sample Nirsoft -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1725685fd74d35122680f7f8e5bd878f_JaffaCakes118
Files
-
1725685fd74d35122680f7f8e5bd878f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 156B - Virtual size: 156B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ