Static task
static1
Behavioral task
behavioral1
Sample
71a45f367d3bc26dcd28c8053d797cf9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
71a45f367d3bc26dcd28c8053d797cf9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
71a45f367d3bc26dcd28c8053d797cf9_JaffaCakes118
-
Size
368KB
-
MD5
71a45f367d3bc26dcd28c8053d797cf9
-
SHA1
853afc6234e9d1c26735eaa07fe9a30c59778c95
-
SHA256
73e8917f6c6519db32c9f8671336dfdc9bcb79b309f3d9de079b9dd2140e85b4
-
SHA512
ce0986b3e0f7761e75e41bd7ef7f21f60129ad94b5b8a13073e1187e0dc4d816486106bf25d553fd75c0394af41f203963963c0c08b6d4722b07b794ce55d13e
-
SSDEEP
6144:sKvooOsWcvVt48GZtNhbkSXbXfGh2PeJaCFaQMxPenX/dZNBGSEens8aec:nvYt2tn6hgSXbXfGIPeTFaOlpGSblA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71a45f367d3bc26dcd28c8053d797cf9_JaffaCakes118
Files
-
71a45f367d3bc26dcd28c8053d797cf9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.LB Size: 1.0MB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.LB50 Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
..... Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ