Static task
static1
Behavioral task
behavioral1
Sample
672612062c55f6457c1d06a582679f9e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
672612062c55f6457c1d06a582679f9e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
672612062c55f6457c1d06a582679f9e_JaffaCakes118
-
Size
104KB
-
MD5
672612062c55f6457c1d06a582679f9e
-
SHA1
d8bb786674823a8e09b0ea7bc3bfa34351c153c5
-
SHA256
06bf96febb885ebf4ff428192c5b241c6432b68517eb68ecd750abe8d1f2b8d1
-
SHA512
a13859f00dd639646c67da90927e61a811788931cae47253a4963c7831d0393ee1481fe6893a490db721f4308309486c9084221ea1d77f0f299df34d04cb1933
-
SSDEEP
1536:5qOTUnvS+LUXgSB2eZupfJMbP8zWGxlExouju4sqfIohM:5vInsB2eZqfJMbEzWMlK3ju4sbr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 672612062c55f6457c1d06a582679f9e_JaffaCakes118
Files
-
672612062c55f6457c1d06a582679f9e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
. Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fran Size: 76KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE