Static task
static1
Behavioral task
behavioral1
Sample
2796d91c19a6f30492552017ac263118_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2796d91c19a6f30492552017ac263118_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2796d91c19a6f30492552017ac263118_JaffaCakes118
-
Size
787KB
-
MD5
2796d91c19a6f30492552017ac263118
-
SHA1
1140094535a17848a9f087874dbc4dc7b7ea5f7d
-
SHA256
5b1e3c222cdc7035cb003a336ad519f72a040217a1c020080a27c197959b7131
-
SHA512
a0e442bef7cda2cf6a8854ce592a2eaa56a20c5647a94418a116bc2fd20716e2da535cc609dcb41a4b583c45483a2817de5715129393a9017b6776ca321a4199
-
SSDEEP
12288:QZztRXU+DjAdir821UKdjpmyMijzwTMTF3Z4mxxTJTux0LnMPmlLUc:I5dDn3U4j8GwTMTQmXlTlLCmlD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2796d91c19a6f30492552017ac263118_JaffaCakes118
Files
-
2796d91c19a6f30492552017ac263118_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 339KB - Virtual size: 804KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 45KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 21KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 362KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE