Static task
static1
Behavioral task
behavioral1
Sample
2759c32a1d128401b008cbc9ee13d4cf_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2759c32a1d128401b008cbc9ee13d4cf_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2759c32a1d128401b008cbc9ee13d4cf_JaffaCakes118
-
Size
24KB
-
MD5
2759c32a1d128401b008cbc9ee13d4cf
-
SHA1
668dfcd63ba0a7c97571e77915e13612dc3331cf
-
SHA256
1a8b60fa508ab27870e7d49e5119183324a42410379d175c2ab9209f5d894303
-
SHA512
171e3058dfac34323b6e406d43ef4c58a53ded665dcb36e6efdd544b20e5444e414f60d362f3cbcd5bba97aee18b5f5fe018c560a841e40962b97b4dcee531ef
-
SSDEEP
384:H5yGOugyqc/GYaMJ+B8E1Ym6VM2bEn9qXggFhv3iSrQaLxuiGRA6o1hT06BtRA+:ZyEubMJ++1HVMx4Xggv3isVudpo1hzm+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2759c32a1d128401b008cbc9ee13d4cf_JaffaCakes118
Files
-
2759c32a1d128401b008cbc9ee13d4cf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
f#�Y0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
f#�Y1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
f#�Y2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE