Static task
static1
Behavioral task
behavioral1
Sample
71bcfb831ca6ff13b9ba7782f0cd241d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
71bcfb831ca6ff13b9ba7782f0cd241d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
71bcfb831ca6ff13b9ba7782f0cd241d_JaffaCakes118
-
Size
1.6MB
-
MD5
71bcfb831ca6ff13b9ba7782f0cd241d
-
SHA1
2cb5c5ba8ab382155d5a9163d62541112be5882e
-
SHA256
b6d90e546d741209ab05ab58a71c5a0fc5f1fe1dd1881168facee54b2d4954b9
-
SHA512
96440a6894ca37408f3d8a28dedcc9bc18ed8caa21de00e13fb00da1a8d30dd6b37cb5dd7369334b136a501b79c3754c2b051842408b4a74266fef0b6fa62d9b
-
SSDEEP
24576:qKOQ6VmsF5PK+sD8iJIoV2xAPCphBXDc96Iq96IK96Ih96I:52mM9K+sBJIBegi9S9S9p9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71bcfb831ca6ff13b9ba7782f0cd241d_JaffaCakes118
Files
-
71bcfb831ca6ff13b9ba7782f0cd241d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 875KB - Virtual size: 875KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 722KB - Virtual size: 722KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ