Static task
static1
Behavioral task
behavioral1
Sample
71715e8209a051c558a05d9bba0c2680_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
71715e8209a051c558a05d9bba0c2680_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
71715e8209a051c558a05d9bba0c2680_JaffaCakes118
-
Size
101KB
-
MD5
71715e8209a051c558a05d9bba0c2680
-
SHA1
880b081b0f6f056c5fe0adb8d5864fb82c5e991c
-
SHA256
90af86589f2ca82fcce7c7a1a71d5d41f2411ecde196e30bde71e807da912427
-
SHA512
2788d7ed8d14e4262dab07336b9779d131071903227e02c4c6789c2d98f2ec2663dac151070dfe746f31986ae1f01af01968c29a5db84c332a11af48b5ba2863
-
SSDEEP
3072:D96u+dzSA3NIw7pS9deTuBT1y1udHBdAjun:D96u+V6ESKTcTWudhdRn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71715e8209a051c558a05d9bba0c2680_JaffaCakes118
Files
-
71715e8209a051c558a05d9bba0c2680_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE