Static task
static1
Behavioral task
behavioral1
Sample
374aefe9c1e7fa1cd578fb90e0440a83_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
374aefe9c1e7fa1cd578fb90e0440a83_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
374aefe9c1e7fa1cd578fb90e0440a83_JaffaCakes118
-
Size
293KB
-
MD5
374aefe9c1e7fa1cd578fb90e0440a83
-
SHA1
39a5ca59ee06a8cf265c08c344c0e5593e7a23b4
-
SHA256
9591415950c2fb87a90ff8dfdd5d1a9b27133a5cf93ad57c0305b3baf3d497c6
-
SHA512
945ba11ec4638a4e820762d09cc271b8083482036ac2c69c45fc97b2d5f09d22bcb6eb9103cc840f9f1e6e129234707f49f67cb6e8df12a19c36c2a049b2bc59
-
SSDEEP
6144:cE7BaKl06xZsPlAW3VjhQ9BkeW3KdamnahCorIIKibD:cu46ZsPqW3VhQ9PE8nahV+ibD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 374aefe9c1e7fa1cd578fb90e0440a83_JaffaCakes118
Files
-
374aefe9c1e7fa1cd578fb90e0440a83_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.kwxesdy Size: 277KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vbojqdp Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cabtxeg Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RPCrypt Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE