Static task
static1
Behavioral task
behavioral1
Sample
71c2ea889534a11dfa7c513c4a51374d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
71c2ea889534a11dfa7c513c4a51374d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
71c2ea889534a11dfa7c513c4a51374d_JaffaCakes118
-
Size
594KB
-
MD5
71c2ea889534a11dfa7c513c4a51374d
-
SHA1
f6c6ae611f67aa7bff4f848d4035ca31f9240294
-
SHA256
9453d415ba81adc1035b84025dcbcb9bdf1b95dee42d5783afc7f39df5ce9fbd
-
SHA512
6bb9067da1e76b852e543775148e841cfef7975b904b802545fdd35242292463755be295363590cf1a1c85c096913bdd23a89c47a9577ea4d4e910db0f043129
-
SSDEEP
12288:E3fnHpXwLT/99MSZXj9uLZucCgaGTWqF3Z4mExw26We0j9LIkCCXi2:EvHpA//oSF9OucAG1QmMpJLIk/F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71c2ea889534a11dfa7c513c4a51374d_JaffaCakes118
Files
-
71c2ea889534a11dfa7c513c4a51374d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 772KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 270KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE