Static task
static1
Behavioral task
behavioral1
Sample
276e6c74530fd35bd71e14a836f64bc2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
276e6c74530fd35bd71e14a836f64bc2_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
276e6c74530fd35bd71e14a836f64bc2_JaffaCakes118
-
Size
202KB
-
MD5
276e6c74530fd35bd71e14a836f64bc2
-
SHA1
73b5c4d811011592777e0506b4d8966d35f6f53a
-
SHA256
46f1b6a895bc0c89597e5304317fd94859ddd20fa624b094fbe08f660b2ecf68
-
SHA512
1c14eea72096848d9a22c54075db235a15d89b3e5b872b4dd039b74e5da165a7cb0c2d642f11df80887813d41f835c639eda9990fb2e21da01db6203eb2a8a06
-
SSDEEP
3072:kHKBQMMQo7y78/WDUmZNNX9/qGeR+sMTzLB4pUpNk+1ynbNOg4OsmfBDzyGOf5Gz:CKHiW78uD3tRegzQUpx1tIfZzy5hs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 276e6c74530fd35bd71e14a836f64bc2_JaffaCakes118
Files
-
276e6c74530fd35bd71e14a836f64bc2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.xvees9 Size: 1KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gxoi6e Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.q17c2$ Size: - Virtual size: 720KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.7nyqr9 Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 3.0MB
.edata Size: - Virtual size: 416KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.info Size: 213KB - Virtual size: 216KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE