Static task
static1
Behavioral task
behavioral1
Sample
275e4fb802670ac45647885f0cff516b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
275e4fb802670ac45647885f0cff516b_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
275e4fb802670ac45647885f0cff516b_JaffaCakes118
-
Size
191KB
-
MD5
275e4fb802670ac45647885f0cff516b
-
SHA1
6a787ff47b390bd869ec3705941ec099d5e128ed
-
SHA256
720c224ea9fa4ba58d5d35dbe67fc6f3e2e084361a926fcca92e41bdc04760af
-
SHA512
e0e6448243cda05e0a4a1d868f29a0d7947bd8945dc88ac5aa9f8645f31b8b9374af59318fa6cca76ab7cc07d4cf5ba0101e98a15aebfdcbfb7863143a077e7c
-
SSDEEP
1536:cx79lOyt/Qy38O93Zz63ziVZwdso4EXpISV5kXr1QqgDopmO8pThggtpjO3E/FNr:cfzt/53z91YHpJ5kXuZop3a9tpmSK6l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 275e4fb802670ac45647885f0cff516b_JaffaCakes118
Files
-
275e4fb802670ac45647885f0cff516b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 129KB - Virtual size: 4.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ebut Size: 56KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE