Static task
static1
Behavioral task
behavioral1
Sample
719cd4bf743bf5aa0e42f0f9d986d41d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
719cd4bf743bf5aa0e42f0f9d986d41d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
719cd4bf743bf5aa0e42f0f9d986d41d_JaffaCakes118
-
Size
86KB
-
MD5
719cd4bf743bf5aa0e42f0f9d986d41d
-
SHA1
382cbfb05ddc28823689d2f6d001304aa487093b
-
SHA256
d01527a536d8e39778a950d7808df3c18f7020bbda3676e0823becc7f20c0ce3
-
SHA512
8dcded2f8137c04a91d6de4aab5719a06e657ce3b042f1a1a674f679ceef8c3e375ec17f45fa9714dba1c8d5c5b2a933d3981547bc1538ee9c805607f8531c29
-
SSDEEP
1536:nkMXL5kb9vs3sFSOX777dkaaSFkC34Zr9647gjZ2KYuOr7n1uTeJuhS4FzqK:nkMupv/b777dk8pIR9OjcKYhv11uE4FL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 719cd4bf743bf5aa0e42f0f9d986d41d_JaffaCakes118
Files
-
719cd4bf743bf5aa0e42f0f9d986d41d_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.it1A Size: 80KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.08Jm Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iqT Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.0dcDiL Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE